@dxos/network-manager 0.6.12 → 0.6.13-main.548ca8d

package/dist/lib/node/{chunk-4YAYC7WN.cjs → chunk-MCPADZS5.cjs}

@@ -26,37 +26,32 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var chunk_4YAYC7WN_exports = {};
-__export(chunk_4YAYC7WN_exports, {
+var chunk_MCPADZS5_exports = {};
+__export(chunk_MCPADZS5_exports, {
   Connection: () => Connection,
   ConnectionLimiter: () => ConnectionLimiter,
   ConnectionLog: () => ConnectionLog,
   ConnectionState: () => ConnectionState,
   EventType: () => EventType,
   FullyConnectedTopology: () => FullyConnectedTopology,
-  LibDataChannelTransport: () => LibDataChannelTransport,
   MAX_CONCURRENT_INITIATING_CONNECTIONS: () => MAX_CONCURRENT_INITIATING_CONNECTIONS,
   MMSTTopology: () => MMSTTopology,
   MemoryTransport: () => MemoryTransport,
   MemoryTransportFactory: () => MemoryTransportFactory,
-  SimplePeerTransport: () => SimplePeerTransport,
-  SimplePeerTransportProxy: () => SimplePeerTransportProxy,
-  SimplePeerTransportProxyFactory: () => SimplePeerTransportProxyFactory,
-  SimplePeerTransportService: () => SimplePeerTransportService,
+  RtcTransportProxy: () => RtcTransportProxy,
+  RtcTransportProxyFactory: () => RtcTransportProxyFactory,
+  RtcTransportService: () => RtcTransportService,
   StarTopology: () => StarTopology,
   Swarm: () => Swarm,
   SwarmMapper: () => SwarmMapper,
   SwarmMessenger: () => SwarmMessenger,
   SwarmNetworkManager: () => SwarmNetworkManager,
-  TcpTransport: () => TcpTransport,
-  TcpTransportFactory: () => TcpTransportFactory,
   TransportKind: () => TransportKind,
   createIceProvider: () => createIceProvider,
-  createLibDataChannelTransportFactory: () => createLibDataChannelTransportFactory,
-  createSimplePeerTransportFactory: () => createSimplePeerTransportFactory,
+  createRtcTransportFactory: () => createRtcTransportFactory,
   createTeleportProtocolFactory: () => createTeleportProtocolFactory
 });
-module.exports = __toCommonJS(chunk_4YAYC7WN_exports);
+module.exports = __toCommonJS(chunk_MCPADZS5_exports);
 var import_async = require("@dxos/async");
 var import_context = require("@dxos/context");
 var import_debug = require("@dxos/debug");
@@ -125,46 +120,37 @@ var import_invariant10 = require("@dxos/invariant");
 var import_keys9 = require("@dxos/keys");
 var import_log11 = require("@dxos/log");
 var import_util8 = require("@dxos/util");
-var import_simple_peer = __toESM(require("simple-peer"));
-var import_tiny_invariant = __toESM(require("tiny-invariant"));
 var import_async10 = require("@dxos/async");
-var import_debug5 = require("@dxos/debug");
-var import_keys10 = require("@dxos/keys");
+var import_async11 = require("@dxos/async");
+var import_invariant11 = require("@dxos/invariant");
 var import_log12 = require("@dxos/log");
 var import_protocols7 = require("@dxos/protocols");
+var import_tracing = require("@dxos/tracing");
 var import_node_stream2 = require("node:stream");
-var import_codec_protobuf = require("@dxos/codec-protobuf");
-var import_invariant11 = require("@dxos/invariant");
-var import_keys11 = require("@dxos/keys");
+var import_async12 = require("@dxos/async");
+var import_context6 = require("@dxos/context");
+var import_debug5 = require("@dxos/debug");
+var import_invariant12 = require("@dxos/invariant");
 var import_log13 = require("@dxos/log");
-var import_bridge = require("@dxos/protocols/proto/dxos/mesh/bridge");
-var import_util9 = require("@dxos/util");
+var import_protocols8 = require("@dxos/protocols");
 var import_node_stream3 = require("node:stream");
-var import_async11 = require("@dxos/async");
-var import_context6 = require("@dxos/context");
+var import_async13 = require("@dxos/async");
+var import_context7 = require("@dxos/context");
 var import_debug6 = require("@dxos/debug");
-var import_invariant12 = require("@dxos/invariant");
-var import_keys12 = require("@dxos/keys");
+var import_invariant13 = require("@dxos/invariant");
+var import_keys10 = require("@dxos/keys");
 var import_log14 = require("@dxos/log");
-var import_protocols8 = require("@dxos/protocols");
+var import_protocols9 = require("@dxos/protocols");
+var import_bridge = require("@dxos/protocols/proto/dxos/mesh/bridge");
+var import_util9 = require("@dxos/util");
+var import_node_stream4 = require("node:stream");
+var import_codec_protobuf = require("@dxos/codec-protobuf");
+var import_invariant14 = require("@dxos/invariant");
+var import_keys11 = require("@dxos/keys");
+var import_log15 = require("@dxos/log");
 var import_bridge2 = require("@dxos/protocols/proto/dxos/mesh/bridge");
 var import_util10 = require("@dxos/util");
-var import_stream = require("stream");
-var import_async12 = require("@dxos/async");
-var import_debug7 = require("@dxos/debug");
-var import_invariant13 = require("@dxos/invariant");
-var import_log15 = require("@dxos/log");
-var import_node_net = require("node:net");
-var import_async13 = require("@dxos/async");
-var import_debug8 = require("@dxos/debug");
-var import_log16 = require("@dxos/log");
 var import_teleport = require("@dxos/teleport");
-var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
-}) : x)(function(x) {
-  if (typeof require !== "undefined") return require.apply(this, arguments);
-  throw Error('Dynamic require of "' + x + '" is not supported');
-});
 function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -200,11 +186,11 @@ var Connection = class {
     this._callbacks = _callbacks;
     this._ctx = new import_context.Context(void 0, {
       F: __dxlog_file,
-      L: 101
+      L: 100
     });
     this.connectedTimeoutContext = new import_context.Context(void 0, {
       F: __dxlog_file,
-      L: 102
+      L: 101
     });
     this._protocolClosed = new import_async.Trigger();
     this._transportClosed = new import_async.Trigger();
@@ -227,7 +213,7 @@ var Connection = class {
       initiator: this.initiator
     }, {
       F: __dxlog_file,
-      L: 138,
+      L: 137,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -250,7 +236,7 @@ var Connection = class {
   async openConnection() {
     (0, import_invariant.invariant)(this._state === "INITIAL", "Invalid state.", {
       F: __dxlog_file,
-      L: 168,
+      L: 167,
       S: this,
       A: [
         "this._state === ConnectionState.INITIAL",
@@ -261,7 +247,7 @@ var Connection = class {
       id: this._instanceId
     }), {
       F: __dxlog_file,
-      L: 169,
+      L: 168,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -273,7 +259,7 @@ var Connection = class {
       initiator: this.initiator
     }, {
       F: __dxlog_file,
-      L: 170,
+      L: 169,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -284,7 +270,7 @@ var Connection = class {
     this._protocol.stream.on("close", () => {
       (0, import_log.log)("protocol stream closed", void 0, {
         F: __dxlog_file,
-        L: 187,
+        L: 186,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -294,7 +280,7 @@ var Connection = class {
     (0, import_async.scheduleTask)(this.connectedTimeoutContext, async () => {
       import_log.log.info(`timeout waiting ${TRANSPORT_CONNECTION_TIMEOUT / 1e3}s for transport to connect, aborting`, void 0, {
         F: __dxlog_file,
-        L: 195,
+        L: 194,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -302,7 +288,7 @@ var Connection = class {
     }, TRANSPORT_CONNECTION_TIMEOUT);
     (0, import_invariant.invariant)(!this._transport, void 0, {
       F: __dxlog_file,
-      L: 203,
+      L: 202,
       S: this,
       A: [
         "!this._transport",
@@ -310,12 +296,14 @@ var Connection = class {
       ]
     });
     this._transport = this._transportFactory.createTransport({
+      ownPeerKey: this.localInfo.peerKey,
+      remotePeerKey: this.remoteInfo.peerKey,
+      topic: this.topic.toHex(),
       initiator: this.initiator,
       stream: this._protocol.stream,
       sendSignal: async (signal) => this._sendSignal(signal),
       sessionId: this.sessionId
     });
-    await this._transport.open();
     this._transport.connected.once(async () => {
       this._changeState("CONNECTED");
       await this.connectedTimeoutContext.dispose();
@@ -361,21 +349,13 @@ var Connection = class {
           C: (f, a) => f(...a)
         });
         this.abort().catch((err2) => this.errors.raise(err2));
-      } else if (err instanceof import_protocols.UnknownProtocolError) {
-        import_log.log.warn("unsure what to do with UnknownProtocolError, will keep on truckin", {
-          err
-        }, {
-          F: __dxlog_file,
-          L: 242,
-          S: this,
-          C: (f, a) => f(...a)
-        });
       }
       if (this._state !== "CLOSED" && this._state !== "CLOSING") {
         await this.connectedTimeoutContext.dispose();
         this.errors.raise(err);
       }
     });
+    await this._transport.open();
     for (const signal of this._incomingSignalBuffer) {
       void this._transport.onSignal(signal);
     }
@@ -737,15 +717,20 @@ var createIceProvider = (iceProviders) => {
       }
       cachedIceServers = (await Promise.all(iceProviders.map(({ urls }) => (0, import_async2.asyncTimeout)(fetch(urls, {
         method: "GET"
-      }), 1e4).then((response) => response.json()).catch((err) => import_log2.log.error("Failed to fetch ICE servers from provider", {
-        urls,
-        err
-      }, {
-        F: __dxlog_file2,
-        L: 27,
-        S: void 0,
-        C: (f, a) => f(...a)
-      }))))).filter(import_util.isNotNullOrUndefined).map(({ iceServers }) => iceServers).flat();
+      }), 1e4).then((response) => response.json()).catch((err) => {
+        const isDev = typeof window !== "undefined" && window.location.href.includes("localhost");
+        if (!isDev) {
+          import_log2.log.error("Failed to fetch ICE servers from provider", {
+            urls,
+            err
+          }, {
+            F: __dxlog_file2,
+            L: 30,
+            S: void 0,
+            C: (f, a) => f(...a)
+          });
+        }
+      })))).filter(import_util.isNotNullOrUndefined).map(({ iceServers }) => iceServers).flat();
       return cachedIceServers;
     }
   };
@@ -2912,11 +2897,12 @@ var MemoryTransport = class _MemoryTransport {
         this.errors.raise(err);
       });
     }
+    return this;
   }
   async close() {
     (0, import_log11.log)("closing...", void 0, {
       F: __dxlog_file12,
-      L: 129,
+      L: 130,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2937,17 +2923,18 @@ var MemoryTransport = class _MemoryTransport {
     this.closed.emit();
     (0, import_log11.log)("closed", void 0, {
       F: __dxlog_file12,
-      L: 157,
+      L: 158,
       S: this,
       C: (f, a) => f(...a)
     });
+    return this;
   }
   async onSignal({ payload }) {
     (0, import_log11.log)("received signal", {
       payload
     }, {
       F: __dxlog_file12,
-      L: 161,
+      L: 163,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2981,1278 +2968,1368 @@ _ts_decorate5([
 var toError = (err) => err instanceof Error ? err : new Error(String(err));
 var TransportKind;
 (function(TransportKind2) {
-  TransportKind2["SIMPLE_PEER"] = "SIMPLE_PEER";
-  TransportKind2["SIMPLE_PEER_PROXY"] = "SIMPLE_PEER_PROXY";
-  TransportKind2["LIBDATACHANNEL"] = "LIBDATACHANNEL";
+  TransportKind2["WEB_RTC"] = "WEB-RTC";
+  TransportKind2["WEB_RTC_PROXY"] = "WEB-RTC_PROXY";
   TransportKind2["MEMORY"] = "MEMORY";
   TransportKind2["TCP"] = "TCP";
 })(TransportKind || (TransportKind = {}));
-var wrtc = null;
-try {
-  wrtc = __require("@koush/wrtc");
-} catch {
-}
-function _ts_decorate6(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/core/mesh/network-manager/src/transport/simplepeer-transport.ts";
-var createSimplePeerTransportFactory = (webrtcConfig, iceProvider) => ({
-  createTransport: (options) => new SimplePeerTransport({
-    ...options,
-    webrtcConfig,
-    iceProvider
-  })
-});
-var SimplePeerTransport = class {
-  get isOpen() {
-    return this._piped && !this._closed;
+var BrowserRtcConnectionFactory = class {
+  async initialize() {
   }
-  /**
-  * @params opts.config formatted as per https://developer.mozilla.org/en-US/docs/Web/API/RTCPeerConnection/RTCPeerConnection
-  */
-  constructor(_params) {
-    this._params = _params;
-    this._peer = void 0;
-    this._closed = false;
-    this._piped = false;
-    this.closed = new import_async10.Event();
-    this.connected = new import_async10.Event();
-    this.errors = new import_debug5.ErrorStream();
-    this._instanceId = import_keys10.PublicKey.random().toHex();
+  async onConnectionDestroyed() {
   }
-  async getStats() {
-    const stats = await this._getStats();
-    if (!stats) {
-      return {
-        bytesSent: 0,
-        bytesReceived: 0,
-        packetsSent: 0,
-        packetsReceived: 0,
-        rawStats: {}
-      };
-    }
-    return {
-      bytesSent: stats.transport.bytesSent,
-      bytesReceived: stats.transport.bytesReceived,
-      packetsSent: stats.transport.packetsSent,
-      packetsReceived: stats.transport.packetsReceived,
-      rawStats: stats.raw
-    };
+  async createConnection(config) {
+    return new RTCPeerConnection(config);
   }
-  async _getStats() {
-    if (typeof this._peer?._pc?.getStats !== "function") {
-      return null;
-    }
-    return await this._peer._pc.getStats().then((stats) => {
-      const statsEntries = Array.from(stats.entries());
-      const transport = statsEntries.filter((s) => s[1].type === "transport")[0][1];
-      const candidatePair = statsEntries.filter((s) => s[0] === transport.selectedCandidatePairId);
-      let selectedCandidatePair;
-      let remoteCandidate;
-      if (candidatePair.length > 0) {
-        selectedCandidatePair = candidatePair[0][1];
-        remoteCandidate = statsEntries.filter((s) => s[0] === selectedCandidatePair.remoteCandidateId)[0][1];
+  async initConnection(connection, info) {
+  }
+};
+var NodeRtcConnectionFactory = class _NodeRtcConnectionFactory {
+  static {
+    this._createdConnections = 0;
+  }
+  static {
+    this._cleanupMutex = new import_async10.Mutex();
+  }
+  // This should be inside the function to avoid triggering `eval` in the global scope.
+  // eslint-disable-next-line no-new-func
+  // TODO(burdon): Do imports here?
+  async initialize() {
+  }
+  async onConnectionDestroyed() {
+    return _NodeRtcConnectionFactory._cleanupMutex.executeSynchronized(async () => {
+      if (--_NodeRtcConnectionFactory._createdConnections === 0) {
+        (await import("#node-datachannel")).cleanup();
       }
-      return {
-        datachannel: statsEntries.filter((s) => s[1].type === "data-channel")[0][1],
-        transport,
-        selectedCandidatePair,
-        remoteCandidate,
-        raw: Object.fromEntries(stats.entries())
-      };
     });
   }
-  async getDetails() {
-    const stats = await this._getStats();
-    const rc = stats?.remoteCandidate;
-    if (!rc) {
-      return "unavailable";
+  async createConnection(config) {
+    return _NodeRtcConnectionFactory._cleanupMutex.executeSynchronized(async () => {
+      const { RTCPeerConnection: RTCPeerConnection1 } = await import("#node-datachannel/polyfill");
+      _NodeRtcConnectionFactory._createdConnections++;
+      return new RTCPeerConnection1(config);
+    });
+  }
+  async initConnection(connection, info) {
+    if (info.initiator) {
+      connection.onnegotiationneeded?.(null);
     }
-    if (rc.candidateType === "relay") {
-      return `${rc.ip}:${rc.port}/${rc.protocol} relay for ${rc.relatedAddress}:${rc.relatedPort}`;
+  }
+};
+var getRtcConnectionFactory = () => {
+  return typeof globalThis.RTCPeerConnection === "undefined" ? new NodeRtcConnectionFactory() : new BrowserRtcConnectionFactory();
+};
+var describeSelectedRemoteCandidate = async (connection) => {
+  const stats = connection && await getRtcConnectionStats(connection);
+  const rc = stats?.remoteCandidate;
+  if (!rc) {
+    return "unavailable";
+  }
+  if (rc.candidateType === "relay") {
+    return `${rc.ip}:${rc.port} relay for ${rc.relatedAddress}:${rc.relatedPort}`;
+  }
+  return `${rc.ip}:${rc.port} ${rc.candidateType}`;
+};
+var createRtcTransportStats = async (connection, topic) => {
+  const stats = connection && await getRtcConnectionStats(connection, topic);
+  if (!stats) {
+    return {
+      bytesSent: 0,
+      bytesReceived: 0,
+      packetsSent: 0,
+      packetsReceived: 0,
+      rawStats: {}
+    };
+  }
+  return {
+    bytesSent: stats.dataChannel?.bytesSent,
+    bytesReceived: stats.dataChannel?.bytesReceived,
+    packetsSent: 0,
+    packetsReceived: 0,
+    rawStats: stats.raw
+  };
+};
+var getRtcConnectionStats = async (connection, channelTopic) => {
+  const stats = await connection.getStats();
+  const statsEntries = Array.from(stats.entries());
+  const transport = statsEntries.find(([_, entry]) => entry.type === "transport")?.[1];
+  const selectedCandidatePair = transport && statsEntries.find(([entryId]) => entryId === transport.selectedCandidatePairId)?.[1];
+  const remoteCandidate = selectedCandidatePair && statsEntries.find(([entryId]) => entryId === selectedCandidatePair.remoteCandidateId)?.[1];
+  const dataChannel = channelTopic && statsEntries.find(([_, entry]) => entry.type === "data-channel" && entry.label === channelTopic)?.[1];
+  return {
+    transport,
+    selectedCandidatePair,
+    dataChannel,
+    remoteCandidate,
+    raw: Object.fromEntries(stats)
+  };
+};
+var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/core/mesh/network-manager/src/transport/webrtc/rtc-transport-channel.ts";
+var MAX_MESSAGE_SIZE = 64 * 1024;
+var MAX_BUFFERED_AMOUNT = 64 * 1024;
+var RtcTransportChannel = class extends import_context6.Resource {
+  constructor(_connection, _options) {
+    super();
+    this._connection = _connection;
+    this._options = _options;
+    this.closed = new import_async12.Event();
+    this.connected = new import_async12.Event();
+    this.errors = new import_debug5.ErrorStream();
+    this._streamDataFlushedCallback = null;
+    this._isChannelCreationInProgress = false;
+  }
+  get isRtcChannelCreationInProgress() {
+    return this._isChannelCreationInProgress;
+  }
+  onConnectionError(error) {
+    if (this.isOpen) {
+      this.errors.raise(error);
     }
-    return `${rc.ip}:${rc.port}/${rc.protocol} ${rc.candidateType}`;
   }
-  async open() {
-    import_log12.log.trace("dxos.mesh.webrtc-transport.open", import_protocols7.trace.begin({
-      id: this._instanceId
-    }), {
+  async _open() {
+    (0, import_invariant12.invariant)(!this._isChannelCreationInProgress, void 0, {
       F: __dxlog_file13,
-      L: 122,
+      L: 56,
       S: this,
-      C: (f, a) => f(...a)
+      A: [
+        "!this._isChannelCreationInProgress",
+        ""
+      ]
     });
-    (0, import_log12.log)("created connection", {
-      params: this._params
-    }, {
+    this._isChannelCreationInProgress = true;
+    this._connection.createDataChannel(this._options.topic).then((channel) => {
+      if (this.isOpen) {
+        this._channel = channel;
+        this._initChannel(this._channel);
+      } else {
+        this._safeCloseChannel(channel);
+      }
+    }).catch((err) => {
+      if (this.isOpen) {
+        this.errors.raise(new import_protocols8.ConnectivityError(`Failed to create a channel: ${err?.message ?? "unknown reason."}`));
+      }
+    }).finally(() => {
+      this._isChannelCreationInProgress = false;
+    });
+  }
+  async _close() {
+    if (this._channel) {
+      this._safeCloseChannel(this._channel);
+      this._channel = void 0;
+      this._stream = void 0;
+    }
+    this.closed.emit();
+    (0, import_log13.log)("closed", void 0, {
       F: __dxlog_file13,
-      L: 123,
+      L: 86,
       S: this,
       C: (f, a) => f(...a)
     });
-    const providedIceServers = await this._params.iceProvider?.getIceServers();
-    if (!this._params.webrtcConfig) {
-      this._params.webrtcConfig = {};
-    }
-    this._params.webrtcConfig.iceServers = [
-      ...this._params.webrtcConfig.iceServers ?? [],
-      ...providedIceServers ?? []
-    ];
-    this._peer = new import_simple_peer.default({
-      channelName: "dxos.mesh.transport",
-      initiator: this._params.initiator,
-      wrtc: import_simple_peer.default.WEBRTC_SUPPORT ? void 0 : wrtc ?? (0, import_debug5.raise)(new Error("wrtc not available")),
-      config: this._params.webrtcConfig
-    });
-    this._peer.on("signal", async (data) => {
-      (0, import_log12.log)("signal", data, {
-        F: __dxlog_file13,
-        L: 142,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      await this._params.sendSignal({
-        payload: {
-          data
-        }
-      });
-    });
-    this._peer.on("connect", () => {
-      (0, import_log12.log)("connected", void 0, {
-        F: __dxlog_file13,
-        L: 147,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      this._params.stream.pipe(this._peer).pipe(this._params.stream);
-      this._piped = true;
-      this.connected.emit();
-    });
-    this._peer.on("close", async () => {
-      (0, import_log12.log)("closed", void 0, {
-        F: __dxlog_file13,
-        L: 154,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      await this.close();
-    });
-    this._peer.on("error", async (err) => {
-      if (typeof RTCError !== "undefined" && err instanceof RTCError) {
-        if (err.errorDetail === "sctp-failure") {
-          this.errors.raise(new import_protocols7.ConnectionResetError("sctp-failure from RTCError", err));
-        } else {
-          import_log12.log.info("unknown RTCError", {
-            err
+  }
+  _initChannel(channel) {
+    Object.assign(channel, {
+      onopen: () => {
+        if (!this.isOpen) {
+          import_log13.log.warn("channel opened in a closed transport", {
+            topic: this._options.topic
           }, {
             F: __dxlog_file13,
-            L: 165,
+            L: 93,
             S: this,
             C: (f, a) => f(...a)
           });
-          this.errors.raise(new import_protocols7.UnknownProtocolError("unknown RTCError", err));
+          this._safeCloseChannel(channel);
+          return;
         }
-      } else if ("code" in err) {
-        import_log12.log.info("simple-peer error", err, {
+        (0, import_log13.log)("onopen", void 0, {
           F: __dxlog_file13,
-          L: 170,
+          L: 98,
           S: this,
           C: (f, a) => f(...a)
         });
-        switch (err.code) {
-          case "ERR_WEBRTC_SUPPORT":
-            this.errors.raise(new import_protocols7.ProtocolError("WebRTC not supported", err));
-            break;
-          case "ERR_SIGNALING":
-            this.errors.raise(new import_protocols7.ConnectivityError("signaling failure", err));
-            break;
-          case "ERR_ICE_CONNECTION_FAILURE":
-          case "ERR_DATA_CHANNEL":
-          case "ERR_CONNECTION_FAILURE":
-            this.errors.raise(new import_protocols7.ConnectivityError("unknown communication failure", err));
-            break;
-          // errors due to library issues or improper API usage
-          case "ERR_CREATE_OFFER":
-          case "ERR_CREATE_ANSWER":
-          case "ERR_SET_LOCAL_DESCRIPTION":
-          case "ERR_SET_REMOTE_DESCRIPTION":
-          case "ERR_ADD_ICE_CANDIDATE":
-            this.errors.raise(new import_protocols7.UnknownProtocolError("unknown simple-peer library failure", err));
-            break;
-          default:
-            this.errors.raise(new Error("unknown simple-peer error"));
-            break;
-        }
-      } else {
-        import_log12.log.info("unknown peer connection error", err, {
+        const duplex = new import_node_stream2.Duplex({
+          read: () => {
+          },
+          write: (chunk, encoding, callback) => {
+            return this._handleChannelWrite(chunk, callback);
+          }
+        });
+        duplex.pipe(this._options.stream).pipe(duplex);
+        this._stream = duplex;
+        this.connected.emit();
+      },
+      onclose: async () => {
+        (0, import_log13.log)("onclose", void 0, {
           F: __dxlog_file13,
-          L: 196,
+          L: 111,
           S: this,
           C: (f, a) => f(...a)
         });
-        this.errors.raise(err);
-      }
-      try {
-        if (typeof this._peer?._pc?.getStats === "function") {
-          this._peer._pc.getStats().then((stats) => {
-            import_log12.log.info("report after webrtc error", {
-              config: this._params.webrtcConfig,
-              stats: Object.fromEntries(stats.entries())
-            }, {
-              F: __dxlog_file13,
-              L: 204,
-              S: this,
-              C: (f, a) => f(...a)
-            });
+        await this.close();
+      },
+      onmessage: (event) => {
+        if (!this._stream) {
+          import_log13.log.warn("ignoring message on a closed channel", void 0, {
+            F: __dxlog_file13,
+            L: 117,
+            S: this,
+            C: (f, a) => f(...a)
           });
+          return;
         }
-      } catch (err2) {
-        import_log12.log.catch(err2, void 0, {
-          F: __dxlog_file13,
-          L: 211,
-          S: this,
-          C: (f, a) => f(...a)
-        });
+        let data = event.data;
+        if (data instanceof ArrayBuffer) {
+          data = Buffer.from(data);
+        }
+        this._stream.push(data);
+      },
+      onerror: (event) => {
+        if (this.isOpen) {
+          const err = event.error instanceof Error ? event.error : new Error(`Datachannel error: ${event.type}.`);
+          this.errors.raise(err);
+        }
+      },
+      onbufferedamountlow: () => {
+        const cb = this._streamDataFlushedCallback;
+        this._streamDataFlushedCallback = null;
+        cb?.();
       }
-      await this.close();
-    });
-    import_log12.log.trace("dxos.mesh.webrtc-transport.open", import_protocols7.trace.end({
-      id: this._instanceId
-    }), {
-      F: __dxlog_file13,
-      L: 217,
-      S: this,
-      C: (f, a) => f(...a)
     });
   }
-  async close() {
-    (0, import_log12.log)("closing...", void 0, {
-      F: __dxlog_file13,
-      L: 222,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    if (this._closed) {
+  async _handleChannelWrite(chunk, callback) {
+    if (!this._channel) {
+      import_log13.log.warn("writing to a channel after a connection was closed", void 0, {
+        F: __dxlog_file13,
+        L: 145,
+        S: this,
+        C: (f, a) => f(...a)
+      });
       return;
     }
-    this._disconnectStreams();
-    this._peer.destroy();
-    this._closed = true;
-    this.closed.emit();
-    (0, import_log12.log)("closed", void 0, {
-      F: __dxlog_file13,
-      L: 230,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-  }
-  async onSignal(signal) {
-    if (this._closed) {
+    if (chunk.length > MAX_MESSAGE_SIZE) {
+      const error = new Error(`Message too large: ${chunk.length} > ${MAX_MESSAGE_SIZE}.`);
+      this.errors.raise(error);
+      callback();
+      return;
+    }
+    try {
+      this._channel.send(chunk);
+    } catch (err) {
+      this.errors.raise(err);
+      callback();
       return;
     }
-    (0, import_tiny_invariant.default)(signal.payload.data, "Signal message must contain signal data.");
-    (0, import_tiny_invariant.default)(this._peer, "Peer must be initialized before receiving signals.");
-    this._peer.signal(signal.payload.data);
+    if (this._channel.bufferedAmount > MAX_BUFFERED_AMOUNT) {
+      if (this._streamDataFlushedCallback !== null) {
+        import_log13.log.error("consumer trying to write before we are ready for more data", void 0, {
+          F: __dxlog_file13,
+          L: 166,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+      }
+      this._streamDataFlushedCallback = callback;
+    } else {
+      callback();
+    }
   }
-  _disconnectStreams() {
-    if (this._piped) {
-      this._params.stream.unpipe?.(this._peer)?.unpipe?.(this._params.stream);
+  _safeCloseChannel(channel) {
+    try {
+      channel.close();
+    } catch (error) {
+      import_log13.log.catch(error, void 0, {
+        F: __dxlog_file13,
+        L: 178,
+        S: this,
+        C: (f, a) => f(...a)
+      });
     }
   }
+  onSignal(signal) {
+    return this._connection.onSignal(signal);
+  }
+  async getDetails() {
+    return describeSelectedRemoteCandidate(this._connection.currentConnection);
+  }
+  async getStats() {
+    return createRtcTransportStats(this._connection.currentConnection, this._options.topic);
+  }
 };
-_ts_decorate6([
-  import_async10.synchronized
-], SimplePeerTransport.prototype, "open", null);
-_ts_decorate6([
-  import_async10.synchronized
-], SimplePeerTransport.prototype, "close", null);
-_ts_decorate6([
-  import_async10.synchronized
-], SimplePeerTransport.prototype, "onSignal", null);
-var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/core/mesh/network-manager/src/transport/simplepeer-transport-service.ts";
-var SimplePeerTransportService = class {
-  constructor(_webrtcConfig, _iceProvider) {
-    this._webrtcConfig = _webrtcConfig;
-    this._iceProvider = _iceProvider;
-    this.transports = new import_util9.ComplexMap(import_keys11.PublicKey.hash);
+var chooseInitiatorPeer = (peer1Key, peer2Key) => peer1Key < peer2Key ? peer1Key : peer2Key;
+var areSdpEqual = (sdp1, sdp2) => {
+  const sdp1Lines = deduplicatedSdpLines(sdp1);
+  const sdp2Lines = deduplicatedSdpLines(sdp2);
+  if (sdp1Lines.length !== sdp2Lines.length) {
+    return false;
+  }
+  return sdp1Lines.every((line, idx) => line === sdp2Lines[idx]);
+};
+var deduplicatedSdpLines = (sdp) => {
+  const deduplicatedLines = [];
+  const seenLines = [];
+  for (const line of sdp.split("\r\n")) {
+    if (line.startsWith("m")) {
+      seenLines.length = 0;
+    }
+    if (seenLines.includes(line)) {
+      continue;
+    }
+    seenLines.push(line);
+    deduplicatedLines.push(line);
   }
-  open(request) {
-    const rpcStream = new import_codec_protobuf.Stream(({ ready, next, close }) => {
-      const duplex = new import_node_stream2.Duplex({
-        read: () => {
-          const callbacks = [
-            ...transportState.writeCallbacks
-          ];
-          transportState.writeCallbacks.length = 0;
-          for (const cb of callbacks) {
-            cb();
-          }
-        },
-        write: function(chunk, _, callback) {
-          next({
-            data: {
-              payload: chunk
-            }
-          });
-          callback();
-        }
-      });
-      const transport = new SimplePeerTransport({
-        initiator: request.initiator,
-        stream: duplex,
-        webrtcConfig: this._webrtcConfig,
-        sendSignal: async (signal) => {
-          next({
-            signal: {
-              payload: signal
-            }
-          });
-        },
-        iceProvider: this._iceProvider
-      });
-      void transport.open();
-      next({
-        connection: {
-          state: import_bridge.ConnectionState.CONNECTING
-        }
-      });
-      transport.connected.on(() => {
-        next({
-          connection: {
-            state: import_bridge.ConnectionState.CONNECTED
-          }
-        });
-      });
-      transport.errors.handle((err) => {
-        next({
-          connection: {
-            state: import_bridge.ConnectionState.CLOSED,
-            error: err.toString()
-          }
-        });
-        close(err);
-      });
-      transport.closed.on(() => {
-        next({
-          connection: {
-            state: import_bridge.ConnectionState.CLOSED
-          }
-        });
-        close();
-      });
-      const transportState = {
-        transport,
-        stream: duplex,
-        writeCallbacks: [],
-        state: "OPEN"
-      };
-      ready();
-      this.transports.set(request.proxyId, transportState);
-    });
-    return rpcStream;
-  }
-  async sendSignal({ proxyId, signal }) {
-    (0, import_invariant11.invariant)(this.transports.has(proxyId), void 0, {
-      F: __dxlog_file14,
-      L: 124,
-      S: this,
-      A: [
-        "this.transports.has(proxyId)",
-        ""
-      ]
-    });
-    await this.transports.get(proxyId).transport.onSignal(signal);
-  }
-  async getDetails({ proxyId }) {
-    (0, import_invariant11.invariant)(this.transports.has(proxyId), void 0, {
-      F: __dxlog_file14,
-      L: 129,
-      S: this,
-      A: [
-        "this.transports.has(proxyId)",
-        ""
-      ]
-    });
-    return {
-      details: await this.transports.get(proxyId).transport.getDetails()
-    };
-  }
-  async getStats({ proxyId }) {
-    (0, import_invariant11.invariant)(this.transports.has(proxyId), void 0, {
-      F: __dxlog_file14,
-      L: 134,
-      S: this,
-      A: [
-        "this.transports.has(proxyId)",
-        ""
-      ]
-    });
-    return {
-      stats: await this.transports.get(proxyId).transport.getStats()
-    };
-  }
-  async sendData({ proxyId, payload }) {
-    if (this.transports.get(proxyId)?.state !== "OPEN") {
-      import_log13.log.debug("transport is closed", void 0, {
+  return deduplicatedLines;
+};
+function _ts_decorate6(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/core/mesh/network-manager/src/transport/webrtc/rtc-peer-connection.ts";
+var RtcPeerConnection = class {
+  constructor(_factory, _options) {
+    this._factory = _factory;
+    this._options = _options;
+    this._channelCreatedCallbacks = /* @__PURE__ */ new Map();
+    this._transportChannels = /* @__PURE__ */ new Map();
+    this._dataChannels = /* @__PURE__ */ new Map();
+    this._readyForCandidates = new import_async11.Trigger();
+    this._offerProcessingMutex = new import_async11.Mutex();
+    this._initiator = chooseInitiatorPeer(_options.ownPeerKey, _options.remotePeerKey) === _options.ownPeerKey;
+  }
+  get transportChannelCount() {
+    return this._transportChannels.size;
+  }
+  get currentConnection() {
+    return this._connection;
+  }
+  async createDataChannel(topic) {
+    const connection = await this._openConnection();
+    if (!this._transportChannels.has(topic)) {
+      if (!this._transportChannels.size) {
+        this._lockAndCloseConnection();
+      }
+      throw new Error("Transport closed while connection was being open");
+    }
+    if (this._initiator) {
+      const channel = connection.createDataChannel(topic);
+      this._dataChannels.set(topic, channel);
+      return channel;
+    } else {
+      const existingChannel = this._dataChannels.get(topic);
+      if (existingChannel) {
+        return existingChannel;
+      }
+      (0, import_log12.log)("waiting for initiator-peer to open a data channel", void 0, {
         F: __dxlog_file14,
-        L: 140,
+        L: 90,
         S: this,
         C: (f, a) => f(...a)
       });
-    }
-    (0, import_invariant11.invariant)(this.transports.has(proxyId), void 0, {
-      F: __dxlog_file14,
-      L: 142,
-      S: this,
-      A: [
-        "this.transports.has(proxyId)",
-        ""
-      ]
-    });
-    const state = this.transports.get(proxyId);
-    const bufferHasSpace = state.stream.push(payload);
-    if (!bufferHasSpace) {
-      await new Promise((resolve) => {
-        state.writeCallbacks.push(resolve);
+      return new Promise((resolve, reject) => {
+        this._channelCreatedCallbacks.set(topic, {
+          resolve,
+          reject
+        });
       });
     }
   }
-  async close({ proxyId }) {
-    await this.transports.get(proxyId)?.transport.close();
-    await this.transports.get(proxyId)?.stream.end();
-    if (this.transports.get(proxyId)) {
-      this.transports.get(proxyId).state = "CLOSED";
+  createTransportChannel(options) {
+    const channel = new RtcTransportChannel(this, options);
+    this._transportChannels.set(options.topic, channel);
+    channel.closed.on(() => {
+      this._transportChannels.delete(options.topic);
+      if (this._transportChannels.size === 0) {
+        this._lockAndCloseConnection();
+      }
+    });
+    return channel;
+  }
+  async _openConnection() {
+    if (this._connection) {
+      return this._connection;
     }
-    (0, import_log13.log)("Closed.", void 0, {
+    (0, import_log12.log)("initializing connection...", () => ({
+      remotePeer: this._options.remotePeerKey
+    }), {
       F: __dxlog_file14,
-      L: 158,
+      L: 115,
       S: this,
       C: (f, a) => f(...a)
     });
-  }
-};
-var __dxlog_file15 = "/home/runner/work/dxos/dxos/packages/core/mesh/network-manager/src/transport/simplepeer-transport-proxy.ts";
-var RPC_TIMEOUT = 1e4;
-var RESP_MIN_THRESHOLD = 500;
-var TIMEOUT_THRESHOLD = 10;
-var SimplePeerTransportProxy = class {
-  constructor(_options) {
-    this._options = _options;
-    this._proxyId = import_keys12.PublicKey.random();
-    this._ctx = new import_context6.Context(void 0, {
-      F: __dxlog_file15,
-      L: 37
-    });
-    this._timeoutCount = 0;
-    this.closed = new import_async11.Event();
-    this.connected = new import_async11.Event();
-    this.errors = new import_debug6.ErrorStream();
-    this._closed = false;
-  }
-  get isOpen() {
-    return !this._closed;
-  }
-  async open() {
-    this._serviceStream = this._options.bridgeService.open({
-      proxyId: this._proxyId,
-      initiator: this._options.initiator
-    }, {
-      timeout: RPC_TIMEOUT
-    });
-    this._serviceStream.waitUntilReady().then(() => {
-      this._serviceStream.subscribe(async (event) => {
-        (0, import_log14.log)("SimplePeerTransportProxy: event", event, {
-          F: __dxlog_file15,
-          L: 66,
+    const config = await this._loadConnectionConfig();
+    const connection = await this._factory.createConnection(config);
+    const iceCandidateErrors = [];
+    Object.assign(connection, {
+      onnegotiationneeded: async () => {
+        (0, import_invariant11.invariant)(this._initiator, void 0, {
+          F: __dxlog_file14,
+          L: 130,
+          S: this,
+          A: [
+            "this._initiator",
+            ""
+          ]
+        });
+        if (connection !== this._connection) {
+          this._onConnectionCallbackAfterClose("onnegotiationneeded", connection);
+          return;
+        }
+        (0, import_log12.log)("onnegotiationneeded", void 0, {
+          F: __dxlog_file14,
+          L: 137,
           S: this,
           C: (f, a) => f(...a)
         });
-        if (event.connection) {
-          await this._handleConnection(event.connection);
-        } else if (event.data) {
-          this._handleData(event.data);
-        } else if (event.signal) {
-          await this._handleSignal(event.signal);
+        try {
+          const offer = await connection.createOffer();
+          await connection.setLocalDescription(offer);
+          await this._sendDescription(connection, offer);
+        } catch (err) {
+          this._lockAndAbort(connection, err);
         }
-      });
-      const proxyStream = new import_node_stream3.Writable({
-        write: (chunk, _, callback) => {
-          const then = performance.now();
-          this._options.bridgeService.sendData({
-            proxyId: this._proxyId,
-            payload: chunk
+      },
+      // When ICE candidate identified (should be sent to remote peer) and when ICE gathering finalized.
+      // https://developer.mozilla.org/en-US/docs/Web/API/RTCPeerConnection/icecandidate_event
+      onicecandidate: async (event) => {
+        if (connection !== this._connection) {
+          this._onConnectionCallbackAfterClose("onicecandidate", connection);
+          return;
+        }
+        if (event.candidate) {
+          (0, import_log12.log)("onicecandidate", {
+            candidate: event.candidate.candidate
           }, {
-            timeout: RPC_TIMEOUT
-          }).then(() => {
-            if (performance.now() - then > RESP_MIN_THRESHOLD) {
-              (0, import_log14.log)("slow response, delaying callback", void 0, {
-                F: __dxlog_file15,
-                L: 90,
-                S: this,
-                C: (f, a) => f(...a)
-              });
-              (0, import_async11.scheduleTask)(this._ctx, () => callback(), RESP_MIN_THRESHOLD);
-            } else {
-              callback();
-            }
-            this._timeoutCount = 0;
-          }, (err) => {
-            if (err instanceof import_protocols8.TimeoutError || err.constructor.name === "TimeoutError") {
-              if (this._timeoutCount++ > TIMEOUT_THRESHOLD) {
-                throw new import_protocols8.TimeoutError(`too many timeouts (${this._timeoutCount} > ${TIMEOUT_THRESHOLD}`);
-              } else {
-                (0, import_log14.log)("timeout error, but still invoking callback", void 0, {
-                  F: __dxlog_file15,
-                  L: 102,
-                  S: this,
-                  C: (f, a) => f(...a)
-                });
-                callback();
-              }
-            } else {
-              import_log14.log.catch(err, void 0, {
-                F: __dxlog_file15,
-                L: 106,
-                S: this,
-                C: (f, a) => f(...a)
-              });
-            }
+            F: __dxlog_file14,
+            L: 156,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          await this._sendIceCandidate(event.candidate);
+        } else {
+          (0, import_log12.log)("onicecandidate gathering complete", void 0, {
+            F: __dxlog_file14,
+            L: 159,
+            S: this,
+            C: (f, a) => f(...a)
           });
         }
-      });
-      proxyStream.on("error", (err) => {
-        (0, import_log14.log)("proxystream error", {
-          err
+      },
+      // When error occurs while performing ICE negotiations through a STUN or TURN server.
+      // It's ok for some candidates to fail if a working pair is eventually found.
+      // https://developer.mozilla.org/en-US/docs/Web/API/RTCPeerConnection/icecandidateerror_event
+      onicecandidateerror: (event) => {
+        const { url, errorCode, errorText } = event;
+        iceCandidateErrors.push({
+          url,
+          errorCode,
+          errorText
+        });
+      },
+      // When possible error during ICE gathering.
+      // https://developer.mozilla.org/en-US/docs/Web/API/RTCPeerConnection/iceconnectionstatechange_event
+      oniceconnectionstatechange: () => {
+        if (connection !== this._connection) {
+          this._onConnectionCallbackAfterClose("oniceconnectionstatechange", connection);
+          return;
+        }
+        (0, import_log12.log)("oniceconnectionstatechange", {
+          state: connection.iceConnectionState
         }, {
-          F: __dxlog_file15,
-          L: 114,
+          F: __dxlog_file14,
+          L: 179,
           S: this,
           C: (f, a) => f(...a)
         });
-      });
-      this._options.stream.pipe(proxyStream);
-    }, (error) => import_log14.log.catch(error, void 0, {
-      F: __dxlog_file15,
-      L: 119,
-      S: this,
-      C: (f, a) => f(...a)
-    }));
+        if (connection.iceConnectionState === "failed") {
+          this._lockAndAbort(connection, createIceFailureError(iceCandidateErrors));
+        }
+      },
+      // When new track (or channel) is added.
+      // State: { new, connecting, connected, disconnected, failed, closed }
+      // https://developer.mozilla.org/en-US/docs/Web/API/RTCPeerConnection/connectionstatechange_event
+      onconnectionstatechange: () => {
+        if (connection !== this._connection) {
+          if (connection.connectionState !== "closed" && connection.connectionState !== "failed") {
+            this._onConnectionCallbackAfterClose("onconnectionstatechange", connection);
+          }
+          return;
+        }
+        (0, import_log12.log)("onconnectionstatechange", {
+          state: connection.connectionState
+        }, {
+          F: __dxlog_file14,
+          L: 196,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+        if (connection.connectionState === "failed") {
+          this._lockAndAbort(connection, new Error("Connection failed."));
+        }
+      },
+      onsignalingstatechange: () => {
+        (0, import_log12.log)("onsignalingstatechange", {
+          state: connection.signalingState
+        }, {
+          F: __dxlog_file14,
+          L: 203,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+      },
+      // When channel is added to connection.
+      // https://developer.mozilla.org/en-US/docs/Web/API/RTCPeerConnection/datachannel_event
+      ondatachannel: (event) => {
+        (0, import_invariant11.invariant)(!this._initiator, "Initiator is expected to create data channels.", {
+          F: __dxlog_file14,
+          L: 209,
+          S: this,
+          A: [
+            "!this._initiator",
+            "'Initiator is expected to create data channels.'"
+          ]
+        });
+        if (connection !== this._connection) {
+          this._onConnectionCallbackAfterClose("ondatachannel", connection);
+          return;
+        }
+        (0, import_log12.log)("ondatachannel", {
+          label: event.channel.label
+        }, {
+          F: __dxlog_file14,
+          L: 216,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+        this._dataChannels.set(event.channel.label, event.channel);
+        const pendingCallback = this._channelCreatedCallbacks.get(event.channel.label);
+        if (pendingCallback) {
+          this._channelCreatedCallbacks.delete(event.channel.label);
+          pendingCallback.resolve(event.channel);
+        }
+      }
+    });
+    this._connection = connection;
+    this._readyForCandidates.reset();
+    await this._factory.initConnection(connection, {
+      initiator: this._initiator
+    });
+    return this._connection;
   }
-  async close() {
-    await this._ctx.dispose();
-    if (this._closed) {
-      return;
-    }
-    await this._serviceStream.close();
-    try {
-      await this._options.bridgeService.close({
-        proxyId: this._proxyId
+  _lockAndAbort(connection, error) {
+    this._abortConnection(connection, error);
+  }
+  _abortConnection(connection, error) {
+    if (connection !== this._connection) {
+      import_log12.log.error("attempted to abort an inactive connection", {
+        error
       }, {
-        timeout: RPC_TIMEOUT
-      });
-    } catch (err) {
-      import_log14.log.catch(err, void 0, {
-        F: __dxlog_file15,
-        L: 134,
+        F: __dxlog_file14,
+        L: 241,
         S: this,
         C: (f, a) => f(...a)
       });
+      this._safeCloseConnection(connection);
+      return;
     }
-    this.closed.emit();
-    this._closed = true;
-  }
-  async onSignal(signal) {
-    this._options.bridgeService.sendSignal({
-      proxyId: this._proxyId,
-      signal
-    }, {
-      timeout: RPC_TIMEOUT
-    }).catch((err) => this.errors.raise(decodeError(err)));
-  }
-  async _handleConnection(connectionEvent) {
-    if (connectionEvent.error) {
-      this.errors.raise(decodeError(connectionEvent.error));
+    for (const [topic, pendingCallback] of this._channelCreatedCallbacks.entries()) {
+      pendingCallback.reject(error);
+      this._transportChannels.delete(topic);
     }
-    switch (connectionEvent.state) {
-      case import_bridge2.ConnectionState.CONNECTED: {
-        this.connected.emit();
-        break;
-      }
-      case import_bridge2.ConnectionState.CLOSED: {
-        await this.close();
-        break;
-      }
+    this._channelCreatedCallbacks.clear();
+    for (const channel of this._transportChannels.values()) {
+      channel.onConnectionError(error);
     }
-  }
-  _handleData(dataEvent) {
-    this._options.stream.write((0, import_util10.arrayToBuffer)(dataEvent.payload));
-  }
-  async _handleSignal(signalEvent) {
-    await this._options.sendSignal(signalEvent.payload);
-  }
-  async getDetails() {
-    return (await this._options.bridgeService.getDetails({
-      proxyId: this._proxyId
-    }, {
-      timeout: RPC_TIMEOUT
-    })).details;
-  }
-  async getStats() {
-    return (await this._options.bridgeService.getStats({
-      proxyId: this._proxyId
+    this._transportChannels.clear();
+    this._safeCloseConnection();
+    (0, import_log12.log)("connection aborted", {
+      reason: error.message
     }, {
-      timeout: RPC_TIMEOUT
-    })).stats;
-  }
-  /**
-  * Called when underlying proxy service becomes unavailable.
-  */
-  // TODO(burdon): Option on close method.
-  forceClose() {
-    void this._serviceStream.close();
-    this.closed.emit();
-    this._closed = true;
-  }
-};
-var SimplePeerTransportProxyFactory = class {
-  constructor() {
-    this._connections = /* @__PURE__ */ new Set();
-  }
-  /**
-  * Sets the current BridgeService to be used to open connections.
-  * Calling this method will close any existing connections.
-  */
-  setBridgeService(bridgeService) {
-    this._bridgeService = bridgeService;
-    for (const connection of this._connections) {
-      connection.forceClose();
-    }
-    return this;
+      F: __dxlog_file14,
+      L: 255,
+      S: this,
+      C: (f, a) => f(...a)
+    });
   }
-  createTransport(options) {
-    (0, import_invariant12.invariant)(this._bridgeService, "SimplePeerTransportProxyFactory is not ready to open connections", {
-      F: __dxlog_file15,
-      L: 218,
+  _lockAndCloseConnection() {
+    (0, import_invariant11.invariant)(this._transportChannels.size === 0, void 0, {
+      F: __dxlog_file14,
+      L: 260,
       S: this,
       A: [
-        "this._bridgeService",
-        "'SimplePeerTransportProxyFactory is not ready to open connections'"
+        "this._transportChannels.size === 0",
+        ""
       ]
     });
-    const transport = new SimplePeerTransportProxy({
-      ...options,
-      bridgeService: this._bridgeService
-    });
-    this._connections.add(transport);
-    transport.closed.on(() => this._connections.delete(transport));
-    return transport;
-  }
-};
-var decodeError = (err) => {
-  const message = typeof err === "string" ? err : err.message;
-  if (message.includes("CONNECTION_RESET")) {
-    return new import_protocols8.ConnectionResetError(message);
-  } else if (message.includes("TIMEOUT")) {
-    return new import_protocols8.TimeoutError(message);
-  } else if (message.includes("PROTOCOL_ERROR")) {
-    return new import_protocols8.ProtocolError(message);
-  } else if (message.includes("CONNECTIVITY_ERROR")) {
-    return new import_protocols8.ConnectivityError(message);
-  } else if (message.includes("UNKNOWN_PROTOCOL_ERROR")) {
-    return new import_protocols8.UnknownProtocolError(message);
-  } else {
-    return typeof err === "string" ? new Error(err) : err;
-  }
-};
-function _ts_decorate7(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-var __dxlog_file16 = "/home/runner/work/dxos/dxos/packages/core/mesh/network-manager/src/transport/libdatachannel-transport.ts";
-var DATACHANNEL_LABEL = "dxos.mesh.transport";
-var MAX_BUFFERED_AMOUNT = 64 * 1024;
-var MAX_MESSAGE_SIZE = 64 * 1024;
-var createLibDataChannelTransportFactory = (webrtcConfig, iceProvider) => {
-  return {
-    createTransport: (options) => new LibDataChannelTransport({
-      ...options,
-      webrtcConfig,
-      iceProvider
-    })
-  };
-};
-var LibDataChannelTransport = class _LibDataChannelTransport {
-  static {
-    this._instanceCount = 0;
-  }
-  constructor(_options) {
-    this._options = _options;
-    this._closed = false;
-    this._connected = false;
-    this._writeCallback = null;
-    this._readyForCandidates = new import_async12.Trigger();
-    this.closed = new import_async12.Event();
-    this.connected = new import_async12.Event();
-    this.errors = new import_debug7.ErrorStream();
-  }
-  get isOpen() {
-    return !!this._peer && !this._closed;
-  }
-  async open() {
-    if (this._closed) {
-      this.errors.raise(new Error("connection already closed"));
-    }
-    const { RTCPeerConnection } = (await importESM("node-datachannel/polyfill")).default;
-    const providedIceServers = await this._options.iceProvider?.getIceServers();
-    if (!this._options.webrtcConfig) {
-      this._options.webrtcConfig = {};
-    }
-    this._options.webrtcConfig.iceServers = [
-      ...this._options.webrtcConfig.iceServers ?? [],
-      ...providedIceServers ?? []
-    ];
-    this._peer = new RTCPeerConnection(this._options.webrtcConfig);
-    this._peer.onicecandidateerror = (event) => {
-      import_log15.log.error("peer.onicecandidateerror", {
-        event
-      }, {
-        F: __dxlog_file16,
-        L: 93,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-    };
-    this._peer.onconnectionstatechange = (event) => {
-      import_log15.log.debug("peer.onconnectionstatechange", {
-        event,
-        peerConnectionState: this._peer?.connectionState,
-        transportConnectionState: this._connected
-      }, {
-        F: __dxlog_file16,
-        L: 97,
+    if (this._connection) {
+      this._safeCloseConnection();
+      (0, import_log12.log)("connection closed", void 0, {
+        F: __dxlog_file14,
+        L: 263,
         S: this,
         C: (f, a) => f(...a)
       });
-    };
-    this._peer.onicecandidate = async (event) => {
-      import_log15.log.debug("peer.onicecandidate", {
-        event
+    }
+  }
+  async onSignal(signal) {
+    const connection = this._connection;
+    if (!connection) {
+      import_log12.log.warn("a signal ignored because the connection was closed", {
+        type: signal.payload.data.type
       }, {
-        F: __dxlog_file16,
-        L: 107,
+        F: __dxlog_file14,
+        L: 271,
         S: this,
         C: (f, a) => f(...a)
       });
-      if (event.candidate) {
-        try {
-          await this._options.sendSignal({
-            payload: {
-              data: {
-                type: "candidate",
-                candidate: {
-                  candidate: event.candidate.candidate,
-                  // These fields never seem to be not null, but connecting to Chrome doesn't work if they are.
-                  sdpMLineIndex: event.candidate.sdpMLineIndex ?? 0,
-                  sdpMid: event.candidate.sdpMid ?? 0
-                }
-              }
-            }
-          });
-        } catch (err) {
-          import_log15.log.info("signaling error", {
-            err
-          }, {
-            F: __dxlog_file16,
-            L: 124,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-        }
+      return;
+    }
+    const data = signal.payload.data;
+    switch (data.type) {
+      case "offer": {
+        await this._offerProcessingMutex.executeSynchronized(async () => {
+          if (isRemoteDescriptionSet(connection, data)) {
+            return;
+          }
+          if (connection.connectionState !== "new") {
+            this._abortConnection(connection, new Error(`Received an offer in ${connection.connectionState}.`));
+            return;
+          }
+          try {
+            await connection.setRemoteDescription({
+              type: data.type,
+              sdp: data.sdp
+            });
+            const answer = await connection.createAnswer();
+            await connection.setLocalDescription(answer);
+            await this._sendDescription(connection, answer);
+            this._onSessionNegotiated(connection);
+          } catch (err) {
+            this._abortConnection(connection, new Error("Error handling a remote offer.", {
+              cause: err
+            }));
+          }
+        });
+        break;
       }
-    };
-    if (this._options.initiator) {
-      (0, import_invariant13.invariant)(this._peer, "not open", {
-        F: __dxlog_file16,
-        L: 130,
-        S: this,
-        A: [
-          "this._peer",
-          "'not open'"
-        ]
-      });
-      this._peer.createOffer().then(async (offer) => {
-        if (this._closed) {
-          return;
-        }
-        if (this._peer?.connectionState !== "connecting") {
-          import_log15.log.error("peer not connecting", {
-            peer: this._peer
-          }, {
-            F: __dxlog_file16,
-            L: 141,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-          this.errors.raise(new Error("invalid state: peer is initiator, but other peer not in state connecting"));
-        }
-        import_log15.log.debug("creating offer", {
-          peer: this._peer,
-          offer
+      case "answer":
+        await this._offerProcessingMutex.executeSynchronized(async () => {
+          try {
+            if (isRemoteDescriptionSet(connection, data)) {
+              return;
+            }
+            if (connection.signalingState !== "have-local-offer") {
+              this._abortConnection(connection, new Error(`Unexpected answer from remote peer, signalingState was ${connection.signalingState}.`));
+              return;
+            }
+            await connection.setRemoteDescription({
+              type: data.type,
+              sdp: data.sdp
+            });
+            this._onSessionNegotiated(connection);
+          } catch (err) {
+            this._abortConnection(connection, new Error("Error handling a remote answer.", {
+              cause: err
+            }));
+          }
+        });
+        break;
+      case "candidate":
+        void this._processIceCandidate(connection, data.candidate);
+        break;
+      default:
+        this._abortConnection(connection, new Error(`Unknown signal type ${data.type}.`));
+        break;
+    }
+    (0, import_log12.log)("signal processed", void 0, {
+      F: __dxlog_file14,
+      L: 330,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+  }
+  async _processIceCandidate(connection, candidate) {
+    try {
+      await this._readyForCandidates.wait();
+      if (connection === this._connection) {
+        (0, import_log12.log)("adding ice candidate", {
+          candidate
         }, {
-          F: __dxlog_file16,
-          L: 145,
+          F: __dxlog_file14,
+          L: 338,
           S: this,
           C: (f, a) => f(...a)
         });
-        await this._peer.setLocalDescription(offer);
-        await this._options.sendSignal({
-          payload: {
-            data: {
-              type: offer.type,
-              sdp: offer.sdp
-            }
-          }
-        });
-      }).catch((err) => {
-        this.errors.raise(err);
+        await connection.addIceCandidate(candidate);
+      }
+    } catch (err) {
+      import_log12.log.catch(err, void 0, {
+        F: __dxlog_file14,
+        L: 342,
+        S: this,
+        C: (f, a) => f(...a)
       });
-      this._handleChannel(this._peer.createDataChannel(DATACHANNEL_LABEL));
-      import_log15.log.debug("created data channel", void 0, {
-        F: __dxlog_file16,
-        L: 155,
+    }
+  }
+  _onSessionNegotiated(connection) {
+    if (connection === this._connection) {
+      (0, import_log12.log)("ready to process ice candidates", void 0, {
+        F: __dxlog_file14,
+        L: 348,
         S: this,
         C: (f, a) => f(...a)
       });
-      this._peer.ondatachannel = () => {
-        this.errors.raise(new Error("unexpected ondatachannel event for initiator"));
-      };
+      this._readyForCandidates.wake();
     } else {
-      this._peer.ondatachannel = (event) => {
-        import_log15.log.debug("peer.ondatachannel (non-initiator)", {
-          event
-        }, {
-          F: __dxlog_file16,
-          L: 161,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-        if (event.channel.label !== DATACHANNEL_LABEL) {
-          this.errors.raise(new Error(`unexpected channel label ${event.channel.label}`));
-        }
-        this._handleChannel(event.channel);
-      };
+      import_log12.log.warn("session was negotiated after connection became inactive", void 0, {
+        F: __dxlog_file14,
+        L: 351,
+        S: this,
+        C: (f, a) => f(...a)
+      });
     }
-    _LibDataChannelTransport._instanceCount++;
   }
-  async close() {
-    await this._close();
-    if (--_LibDataChannelTransport._instanceCount === 0) {
-      (await importESM("node-datachannel")).cleanup();
-    }
+  _onConnectionCallbackAfterClose(callback, connection) {
+    import_log12.log.warn("callback invoked after a connection was destroyed, this is probably a bug", {
+      callback,
+      state: connection.connectionState
+    }, {
+      F: __dxlog_file14,
+      L: 356,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    this._safeCloseConnection(connection);
   }
-  async _close() {
-    if (this._closed) {
-      return;
-    }
-    await this._disconnectStreams();
+  _safeCloseConnection(connection = this._connection) {
+    const resetFields = this._connection && connection === this._connection;
     try {
-      this._peer?.close();
+      connection?.close();
     } catch (err) {
-      this.errors.raise(err);
+      import_log12.log.catch(err, void 0, {
+        F: __dxlog_file14,
+        L: 368,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+    }
+    if (resetFields) {
+      this._connection = void 0;
+      this._dataChannels.clear();
+      this._readyForCandidates.wake();
+      void this._factory.onConnectionDestroyed().catch((err) => import_log12.log.catch(err, void 0, {
+        F: __dxlog_file14,
+        L: 374,
+        S: this,
+        C: (f, a) => f(...a)
+      }));
+      for (const [_, pendingCallback] of this._channelCreatedCallbacks.entries()) {
+        pendingCallback.reject("Connection closed.");
+      }
+      this._channelCreatedCallbacks.clear();
     }
-    this._peer = void 0;
-    this._closed = true;
-    this.closed.emit();
   }
-  /**
-  * Handle data channel events.
-  */
-  _handleChannel(dataChannel) {
-    this._channel = dataChannel;
-    this._channel.onopen = () => {
-      import_log15.log.debug("channel.onopen", void 0, {
-        F: __dxlog_file16,
-        L: 206,
+  async _loadConnectionConfig() {
+    const config = {
+      ...this._options.webrtcConfig
+    };
+    try {
+      const providedIceServers = await this._options.iceProvider?.getIceServers() ?? [];
+      if (providedIceServers.length > 0) {
+        config.iceServers = [
+          ...config.iceServers ?? [],
+          ...providedIceServers
+        ];
+      }
+    } catch (error) {
+      import_log12.log.catch(error, void 0, {
+        F: __dxlog_file14,
+        L: 390,
         S: this,
         C: (f, a) => f(...a)
       });
-      const duplex = new import_stream.Duplex({
-        read: () => {
-        },
-        write: async (chunk, encoding, callback) => {
-          if (chunk.length > MAX_MESSAGE_SIZE) {
-            this.errors.raise(new Error(`message too large: ${chunk.length} > ${MAX_MESSAGE_SIZE}`));
-          }
-          try {
-            dataChannel.send(chunk);
-          } catch (err) {
-            this.errors.raise(err);
-            await this._close();
-          }
-          if (this._channel.bufferedAmount > MAX_BUFFERED_AMOUNT) {
-            if (this._writeCallback !== null) {
-              import_log15.log.error("consumer trying to write before we are ready for more data", void 0, {
-                F: __dxlog_file16,
-                L: 223,
-                S: this,
-                C: (f, a) => f(...a)
-              });
+    }
+    return config;
+  }
+  async _sendIceCandidate(candidate) {
+    try {
+      await this._options.sendSignal({
+        payload: {
+          data: {
+            type: "candidate",
+            candidate: {
+              candidate: candidate.candidate,
+              // These fields never seem to be not null, but connecting to Chrome doesn't work if they are.
+              sdpMLineIndex: candidate.sdpMLineIndex ?? "0",
+              sdpMid: candidate.sdpMid ?? "0"
             }
-            this._writeCallback = callback;
-          } else {
-            callback();
           }
         }
       });
-      duplex.pipe(this._options.stream).pipe(duplex);
-      this._stream = duplex;
-      this._connected = true;
-      this.connected.emit();
-    };
-    this._channel.onclose = async (err) => {
-      import_log15.log.info("channel.onclose", {
+    } catch (err) {
+      import_log12.log.warn("signaling error", {
         err
       }, {
-        F: __dxlog_file16,
-        L: 239,
+        F: __dxlog_file14,
+        L: 411,
         S: this,
         C: (f, a) => f(...a)
       });
-      await this._close();
+    }
+  }
+  async _sendDescription(connection, description) {
+    if (connection !== this._connection) {
+      return;
+    }
+    const data = {
+      type: description.type,
+      sdp: description.sdp
     };
-    this._channel.onerror = async (err) => {
-      this.errors.raise(new Error("channel error: " + err.toString()));
-      await this._close();
+    await this._options.sendSignal({
+      payload: {
+        data
+      }
+    });
+  }
+  get _connectionInfo() {
+    const connectionInfo = this._connection && {
+      connectionState: this._connection.connectionState,
+      iceConnectionState: this._connection.iceConnectionState,
+      iceGatheringState: this._connection.iceGatheringState,
+      signalingState: this._connection.signalingState,
+      remoteDescription: this._connection.remoteDescription,
+      localDescription: this._connection.localDescription
     };
-    this._channel.onbufferedamountlow = () => {
-      const cb = this._writeCallback;
-      this._writeCallback = null;
-      cb?.();
+    return {
+      ...connectionInfo,
+      ts: Date.now(),
+      remotePeerKey: this._options.remotePeerKey,
+      channels: [
+        ...this._transportChannels.keys()
+      ].map((topic) => topic),
+      config: this._connection?.getConfiguration()
     };
-    this._channel.onmessage = (event) => {
-      let data = event.data;
-      if (data instanceof ArrayBuffer) {
-        data = Buffer.from(data);
-      }
-      this._stream.push(data);
+  }
+  get _loggerContext() {
+    return {
+      ownPeerKey: this._options.ownPeerKey,
+      remotePeerKey: this._options.remotePeerKey,
+      initiator: this._initiator,
+      channels: this._transportChannels.size
     };
   }
-  async onSignal(signal) {
-    (0, import_invariant13.invariant)(this._peer, "not open", {
-      F: __dxlog_file16,
-      L: 265,
-      S: this,
-      A: [
-        "this._peer",
-        "'not open'"
-      ]
-    });
+};
+_ts_decorate6([
+  import_async11.synchronized
+], RtcPeerConnection.prototype, "_openConnection", null);
+_ts_decorate6([
+  import_async11.synchronized
+], RtcPeerConnection.prototype, "_lockAndAbort", null);
+_ts_decorate6([
+  import_async11.synchronized
+], RtcPeerConnection.prototype, "_lockAndCloseConnection", null);
+_ts_decorate6([
+  import_async11.synchronized
+], RtcPeerConnection.prototype, "onSignal", null);
+_ts_decorate6([
+  import_tracing.trace.info()
+], RtcPeerConnection.prototype, "_connectionInfo", null);
+_ts_decorate6([
+  import_log12.logInfo
+], RtcPeerConnection.prototype, "_loggerContext", null);
+RtcPeerConnection = _ts_decorate6([
+  import_tracing.trace.resource()
+], RtcPeerConnection);
+var isRemoteDescriptionSet = (connection, data) => {
+  if (!connection.remoteDescription?.type || connection.remoteDescription?.type !== data.type) {
+    return false;
+  }
+  return areSdpEqual(connection.remoteDescription.sdp, data.sdp);
+};
+var createIceFailureError = (details) => {
+  const candidateErrors = details.map(({ url, errorCode, errorText }) => `${errorCode} ${url}: ${errorText}`);
+  return new import_protocols7.ConnectivityError(`ICE failed:
+${candidateErrors.join("\n")}`);
+};
+var createRtcTransportFactory = (webrtcConfig, iceProvider) => {
+  const connectionFactory = getRtcConnectionFactory();
+  return {
+    createTransport: (options) => {
+      const connection = new RtcPeerConnection(connectionFactory, {
+        ownPeerKey: options.ownPeerKey,
+        remotePeerKey: options.remotePeerKey,
+        sendSignal: options.sendSignal,
+        webrtcConfig,
+        iceProvider
+      });
+      return connection.createTransportChannel(options);
+    }
+  };
+};
+var __dxlog_file15 = "/home/runner/work/dxos/dxos/packages/core/mesh/network-manager/src/transport/webrtc/rtc-transport-proxy.ts";
+var RPC_TIMEOUT = 1e4;
+var CLOSE_RPC_TIMEOUT = 3e3;
+var RESP_MIN_THRESHOLD = 500;
+var RtcTransportProxy = class extends import_context7.Resource {
+  constructor(_options) {
+    super();
+    this._options = _options;
+    this._proxyId = import_keys10.PublicKey.random();
+    this.closed = new import_async13.Event();
+    this.connected = new import_async13.Event();
+    this.errors = new import_debug6.ErrorStream();
+  }
+  async _open() {
+    let stream;
     try {
-      const data = signal.payload.data;
-      switch (data.type) {
-        case "offer": {
-          if (this._peer.connectionState !== "new") {
-            import_log15.log.error("received offer but peer not in state new", {
-              peer: this._peer
-            }, {
-              F: __dxlog_file16,
-              L: 272,
-              S: this,
-              C: (f, a) => f(...a)
-            });
-            this.errors.raise(new Error("invalid signalling state: received offer when peer is not in state new"));
-            break;
-          }
-          try {
-            await this._peer.setRemoteDescription({
-              type: data.type,
-              sdp: data.sdp
-            });
-            const answer = await this._peer.createAnswer();
-            await this._peer.setLocalDescription(answer);
-            await this._options.sendSignal({
-              payload: {
-                data: {
-                  type: answer.type,
-                  sdp: answer.sdp
-                }
-              }
-            });
-            this._readyForCandidates.wake();
-          } catch (err) {
-            import_log15.log.error("cannot handle offer from signalling server", {
-              err
-            }, {
-              F: __dxlog_file16,
-              L: 284,
-              S: this,
-              C: (f, a) => f(...a)
-            });
-            this.errors.raise(new Error("error handling offer"));
-          }
-          break;
+      stream = this._options.bridgeService.open({
+        proxyId: this._proxyId,
+        remotePeerKey: this._options.remotePeerKey,
+        ownPeerKey: this._options.ownPeerKey,
+        topic: this._options.topic,
+        initiator: this._options.initiator ?? false
+      }, {
+        timeout: RPC_TIMEOUT
+      });
+    } catch (error) {
+      this.errors.raise(error);
+      return;
+    }
+    this._serviceStream = stream;
+    stream.waitUntilReady().then(() => {
+      stream.subscribe(async (event) => {
+        (0, import_log14.log)("rtc transport proxy event", event, {
+          F: __dxlog_file15,
+          L: 66,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+        if (event.connection) {
+          await this._handleConnection(event.connection);
+        } else if (event.data) {
+          this._handleData(event.data);
+        } else if (event.signal) {
+          await this._handleSignal(event.signal);
         }
-        case "answer":
-          try {
-            await this._peer.setRemoteDescription({
-              type: data.type,
-              sdp: data.sdp
-            });
-            this._readyForCandidates.wake();
-          } catch (err) {
-            import_log15.log.error("cannot handle answer from signalling server", {
-              err
-            }, {
-              F: __dxlog_file16,
-              L: 295,
-              S: this,
-              C: (f, a) => f(...a)
-            });
-            this.errors.raise(new Error("error handling answer"));
-          }
-          break;
-        case "candidate":
-          await this._readyForCandidates.wait();
-          await this._peer.addIceCandidate({
-            candidate: data.candidate.candidate
-          });
-          break;
-        default:
-          import_log15.log.error("unhandled signal type", {
-            type: data.type,
-            signal
+      }, (err) => {
+        (0, import_log14.log)("rtc bridge stream closed", {
+          err
+        }, {
+          F: __dxlog_file15,
+          L: 76,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+        if (err) {
+          this._raiseIfOpen(err);
+        } else {
+          void this.close();
+        }
+      });
+      const connectorStream = new import_node_stream3.Writable({
+        write: (chunk, _, callback) => {
+          const sendStartMs = Date.now();
+          this._options.bridgeService.sendData({
+            proxyId: this._proxyId,
+            payload: chunk
           }, {
-            F: __dxlog_file16,
-            L: 306,
-            S: this,
-            C: (f, a) => f(...a)
+            timeout: RPC_TIMEOUT
+          }).then(() => {
+            if (Date.now() - sendStartMs > RESP_MIN_THRESHOLD) {
+              (0, import_log14.log)("slow response, delaying callback", void 0, {
+                F: __dxlog_file15,
+                L: 93,
+                S: this,
+                C: (f, a) => f(...a)
+              });
+              (0, import_async13.scheduleTask)(this._ctx, () => callback(), RESP_MIN_THRESHOLD);
+            } else {
+              callback();
+            }
+          }, (err) => {
+            callback();
+            this._raiseIfOpen(err);
           });
-          this.errors.raise(new Error(`unhandled signal type ${data.type}`));
+        }
+      });
+      connectorStream.on("error", (err) => {
+        this._raiseIfOpen(err);
+      });
+      this._options.stream.pipe(connectorStream);
+    }, (error) => {
+      if (error) {
+        this._raiseIfOpen(error);
+      } else {
+        void this.close();
       }
+    });
+  }
+  async _close() {
+    try {
+      await this._serviceStream?.close();
+      this._serviceStream = void 0;
     } catch (err) {
-      import_log15.log.catch(err, void 0, {
-        F: __dxlog_file16,
-        L: 310,
+      import_log14.log.catch(err, void 0, {
+        F: __dxlog_file15,
+        L: 128,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+    }
+    try {
+      await this._options.bridgeService.close({
+        proxyId: this._proxyId
+      }, {
+        timeout: CLOSE_RPC_TIMEOUT
+      });
+    } catch (err) {
+      import_log14.log.catch(err, void 0, {
+        F: __dxlog_file15,
+        L: 134,
         S: this,
         C: (f, a) => f(...a)
       });
     }
+    this.closed.emit();
   }
-  async getDetails() {
-    const stats = await this._getStats();
-    const rc = stats?.remoteCandidate;
-    if (!rc) {
-      return "unavailable";
+  async onSignal(signal) {
+    this._options.bridgeService.sendSignal({
+      proxyId: this._proxyId,
+      signal
+    }, {
+      timeout: RPC_TIMEOUT
+    }).catch((err) => this._raiseIfOpen(decodeError(err)));
+  }
+  async _handleConnection(connectionEvent) {
+    if (connectionEvent.error) {
+      this.errors.raise(decodeError(connectionEvent.error));
+      return;
+    }
+    switch (connectionEvent.state) {
+      case import_bridge.ConnectionState.CONNECTED: {
+        this.connected.emit();
+        break;
+      }
+      case import_bridge.ConnectionState.CLOSED: {
+        await this.close();
+        break;
+      }
+    }
+  }
+  _handleData(dataEvent) {
+    try {
+      this._options.stream.write((0, import_util9.arrayToBuffer)(dataEvent.payload));
+    } catch (error) {
+      this._raiseIfOpen(error);
+    }
+  }
+  async _handleSignal(signalEvent) {
+    try {
+      await this._options.sendSignal(signalEvent.payload);
+    } catch (error) {
+      const type = signalEvent.payload.payload.data?.type;
+      if (type === "offer" || type === "answer") {
+        this._raiseIfOpen(new import_protocols9.ConnectivityError(`Session establishment failed: ${type} couldn't be sent.`));
+      }
     }
-    if (rc.candidateType === "relay") {
-      return `${rc.ip}:${rc.port} relay for ${rc.relatedAddress}:${rc.relatedPort}`;
+  }
+  async getDetails() {
+    try {
+      const response = await this._options.bridgeService.getDetails({
+        proxyId: this._proxyId
+      }, {
+        timeout: RPC_TIMEOUT
+      });
+      return response.details;
+    } catch (err) {
+      return "bridge-svc unreachable";
     }
-    return `${rc.ip}:${rc.port} ${rc.candidateType}`;
   }
   async getStats() {
-    const stats = await this._getStats();
-    if (!stats) {
+    try {
+      const response = await this._options.bridgeService.getStats({
+        proxyId: this._proxyId
+      }, {
+        timeout: RPC_TIMEOUT
+      });
+      return response.stats;
+    } catch (err) {
       return {
         bytesSent: 0,
         bytesReceived: 0,
         packetsSent: 0,
         packetsReceived: 0,
-        rawStats: {}
+        rawStats: "bridge-svc unreachable"
       };
     }
-    return {
-      bytesSent: stats.transport.bytesSent,
-      bytesReceived: stats.transport.bytesReceived,
-      packetsSent: 0,
-      packetsReceived: 0,
-      rawStats: stats.raw
-    };
   }
-  async _getStats() {
-    (0, import_invariant13.invariant)(this._peer, "not open", {
-      F: __dxlog_file16,
-      L: 350,
+  _raiseIfOpen(error) {
+    if (this.isOpen) {
+      this.errors.raise(error);
+    } else {
+      import_log14.log.info("error swallowed because transport was closed", {
+        message: error.message
+      }, {
+        F: __dxlog_file15,
+        L: 215,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+    }
+  }
+  /**
+  * Called when underlying proxy service becomes unavailable.
+  */
+  forceClose() {
+    void this._serviceStream?.close();
+    this.closed.emit();
+  }
+};
+var RtcTransportProxyFactory = class {
+  constructor() {
+    this._connections = /* @__PURE__ */ new Set();
+  }
+  /**
+  * Sets the current BridgeService to be used to open connections.
+  * Calling this method will close any existing connections.
+  */
+  setBridgeService(bridgeService) {
+    this._bridgeService = bridgeService;
+    for (const connection of this._connections) {
+      connection.forceClose();
+    }
+    return this;
+  }
+  createTransport(options) {
+    (0, import_invariant13.invariant)(this._bridgeService, "RtcTransportProxyFactory is not ready to open connections", {
+      F: __dxlog_file15,
+      L: 245,
       S: this,
       A: [
-        "this._peer",
-        "'not open'"
+        "this._bridgeService",
+        "'RtcTransportProxyFactory is not ready to open connections'"
       ]
     });
-    const stats = await this._peer.getStats();
-    const statsEntries = Array.from(stats.entries());
-    const transport = statsEntries.filter((s) => s[1].type === "transport")[0][1];
-    const candidatePair = statsEntries.filter((s) => s[0] === transport.selectedCandidatePairId);
-    let selectedCandidatePair;
-    let remoteCandidate;
-    if (candidatePair.length > 0) {
-      selectedCandidatePair = candidatePair[0][1];
-      remoteCandidate = statsEntries.filter((s) => s[0] === selectedCandidatePair.remoteCandidateId)[0][1];
-    }
-    return {
-      transport,
-      selectedCandidatePair,
-      remoteCandidate,
-      raw: Object.fromEntries(stats)
-    };
-  }
-  async _disconnectStreams() {
-    this._options.stream.unpipe?.(this._stream)?.unpipe?.(this._options.stream);
+    const transport = new RtcTransportProxy({
+      ...options,
+      bridgeService: this._bridgeService
+    });
+    this._connections.add(transport);
+    transport.closed.on(() => this._connections.delete(transport));
+    return transport;
   }
 };
-_ts_decorate7([
-  import_async12.synchronized
-], LibDataChannelTransport.prototype, "_close", null);
-var importESM = Function("path", "return import(path)");
-var __dxlog_file17 = "/home/runner/work/dxos/dxos/packages/core/mesh/network-manager/src/transport/tcp-transport.ts";
-var TcpTransportFactory = {
-  createTransport: (options) => new TcpTransport(options)
+var decodeError = (err) => {
+  const message = typeof err === "string" ? err : err.message;
+  if (message.includes("CONNECTION_RESET")) {
+    return new import_protocols9.ConnectionResetError(message);
+  } else if (message.includes("TIMEOUT")) {
+    return new import_protocols9.TimeoutError(message);
+  } else if (message.includes("CONNECTIVITY_ERROR")) {
+    return new import_protocols9.ConnectivityError(message);
+  } else {
+    return typeof err === "string" ? new Error(err) : err;
+  }
 };
-var TcpTransport = class {
-  constructor(options) {
-    this.options = options;
-    this._server = void 0;
-    this._socket = void 0;
-    this._connected = false;
-    this._closed = false;
-    this.closed = new import_async13.Event();
-    this.connected = new import_async13.Event();
-    this.errors = new import_debug8.ErrorStream();
+var __dxlog_file16 = "/home/runner/work/dxos/dxos/packages/core/mesh/network-manager/src/transport/webrtc/rtc-transport-service.ts";
+var RtcTransportService = class {
+  constructor(webrtcConfig, iceProvider, _transportFactory = createRtcTransportFactory(webrtcConfig, iceProvider)) {
+    this._transportFactory = _transportFactory;
+    this._openTransports = new import_util10.ComplexMap(import_keys11.PublicKey.hash);
   }
-  get isOpen() {
-    return this._connected && !this._closed;
+  hasOpenTransports() {
+    return this._openTransports.size > 0;
   }
-  async open() {
-    (0, import_log16.log)("opening", void 0, {
-      F: __dxlog_file17,
-      L: 39,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    if (this.options.initiator) {
-      setTimeout(async () => {
-        const { Server } = await import("node:net");
-        this._server = new Server((socket) => {
-          (0, import_log16.log)("new connection", void 0, {
-            F: __dxlog_file17,
-            L: 47,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-          if (this._connected) {
-            socket.destroy();
-          }
-          this._handleSocket(socket);
-        });
-        this._server.on("listening", () => {
-          const { port } = this._server.address();
-          (0, import_log16.log)("listening", {
-            port
-          }, {
-            F: __dxlog_file17,
-            L: 56,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-          void this.options.sendSignal({
-            payload: {
-              port
+  open(request) {
+    const existingTransport = this._openTransports.get(request.proxyId);
+    if (existingTransport) {
+      import_log15.log.error("requesting a new transport bridge for an existing proxy", void 0, {
+        F: __dxlog_file16,
+        L: 53,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      void this._safeCloseTransport(existingTransport);
+      this._openTransports.delete(request.proxyId);
+    }
+    return new import_codec_protobuf.Stream(({ ready, next, close }) => {
+      const pushNewState = createStateUpdater(next);
+      const transportStream = new import_node_stream4.Duplex({
+        read: () => {
+          const callbacks = [
+            ...transportState.writeProcessedCallbacks
+          ];
+          transportState.writeProcessedCallbacks.length = 0;
+          callbacks.forEach((cb) => cb());
+        },
+        write: function(chunk, _, callback) {
+          next({
+            data: {
+              payload: chunk
             }
-          }).catch((err) => {
-            if (!this._closed) {
-              this.errors.raise(err);
+          });
+          callback();
+        }
+      });
+      const transport = this._transportFactory.createTransport({
+        initiator: request.initiator,
+        topic: request.topic,
+        ownPeerKey: request.ownPeerKey,
+        remotePeerKey: request.remotePeerKey,
+        stream: transportStream,
+        sendSignal: async (signal) => {
+          next({
+            signal: {
+              payload: signal
             }
           });
-        });
-        this._server.on("error", (err) => {
-          this.errors.raise(err);
-        });
-        this._server.listen(0);
+        }
       });
-    }
+      const transportState = {
+        proxyId: request.proxyId,
+        transport,
+        connectorStream: transportStream,
+        writeProcessedCallbacks: []
+      };
+      pushNewState(import_bridge2.ConnectionState.CONNECTING);
+      transport.connected.on(() => pushNewState(import_bridge2.ConnectionState.CONNECTED));
+      transport.errors.handle(async (err) => {
+        pushNewState(import_bridge2.ConnectionState.CLOSED, err);
+        void this._safeCloseTransport(transportState);
+        close(err);
+      });
+      transport.closed.on(async () => {
+        pushNewState(import_bridge2.ConnectionState.CLOSED);
+        void this._safeCloseTransport(transportState);
+        close();
+      });
+      this._openTransports.set(request.proxyId, transportState);
+      transport.open().catch(async (err) => {
+        pushNewState(import_bridge2.ConnectionState.CLOSED, err);
+        void this._safeCloseTransport(transportState);
+        close(err);
+      });
+      ready();
+    });
   }
-  async close() {
-    (0, import_log16.log)("closing", void 0, {
-      F: __dxlog_file17,
-      L: 78,
+  async sendSignal({ proxyId, signal }) {
+    const transport = this._openTransports.get(proxyId);
+    (0, import_invariant14.invariant)(transport, void 0, {
+      F: __dxlog_file16,
+      L: 121,
       S: this,
-      C: (f, a) => f(...a)
+      A: [
+        "transport",
+        ""
+      ]
     });
-    this._socket?.destroy();
-    this._server?.close();
-    this._closed = true;
+    await transport.transport.onSignal(signal);
   }
-  async onSignal({ payload }) {
-    (0, import_log16.log)("received signal", {
-      payload
-    }, {
-      F: __dxlog_file17,
-      L: 85,
+  async getDetails({ proxyId }) {
+    const transport = this._openTransports.get(proxyId);
+    (0, import_invariant14.invariant)(transport, void 0, {
+      F: __dxlog_file16,
+      L: 128,
       S: this,
-      C: (f, a) => f(...a)
-    });
-    if (this.options.initiator || this._connected) {
-      return;
-    }
-    const socket = new import_node_net.Socket();
-    this._handleSocket(socket);
-    socket.connect({
-      port: payload.port,
-      host: "localhost"
+      A: [
+        "transport",
+        ""
+      ]
     });
+    return {
+      details: await transport.transport.getDetails()
+    };
   }
-  async getDetails() {
-    if (this.options.initiator) {
-      const { port: port2, address: address2 } = this._server?.address();
-      return `LISTEN ${address2}:${port2}`;
-    }
-    const { port, address } = this._socket?.address();
-    return `ACCEPT ${address}:${port}`;
-  }
-  async getStats() {
+  async getStats({ proxyId }) {
+    const transport = this._openTransports.get(proxyId);
+    (0, import_invariant14.invariant)(transport, void 0, {
+      F: __dxlog_file16,
+      L: 135,
+      S: this,
+      A: [
+        "transport",
+        ""
+      ]
+    });
     return {
-      bytesSent: 0,
-      bytesReceived: 0,
-      packetsSent: 0,
-      packetsReceived: 0
+      stats: await transport.transport.getStats()
     };
   }
-  _handleSocket(socket) {
-    (0, import_log16.log)("handling socket", {
-      remotePort: socket.remotePort,
-      localPort: socket.localPort
-    }, {
-      F: __dxlog_file17,
-      L: 115,
+  async sendData({ proxyId, payload }) {
+    const transport = this._openTransports.get(proxyId);
+    (0, import_invariant14.invariant)(transport, void 0, {
+      F: __dxlog_file16,
+      L: 142,
       S: this,
-      C: (f, a) => f(...a)
+      A: [
+        "transport",
+        ""
+      ]
     });
-    this._socket = socket;
-    this._socket.on("connect", () => {
-      (0, import_log16.log)("connected to", {
-        port: this._socket?.remotePort
+    const bufferHasSpace = transport.connectorStream.push(payload);
+    if (!bufferHasSpace) {
+      await new Promise((resolve) => {
+        transport.writeProcessedCallbacks.push(resolve);
+      });
+    }
+  }
+  async close({ proxyId }) {
+    const transport = this._openTransports.get(proxyId);
+    if (!transport) {
+      return;
+    }
+    this._openTransports.delete(proxyId);
+    await this._safeCloseTransport(transport);
+  }
+  async _safeCloseTransport(transport) {
+    if (this._openTransports.get(transport.proxyId) === transport) {
+      this._openTransports.delete(transport.proxyId);
+    }
+    transport.writeProcessedCallbacks.forEach((cb) => cb());
+    try {
+      await transport.transport.close();
+    } catch (error) {
+      import_log15.log.warn("transport close error", {
+        message: error?.message
       }, {
-        F: __dxlog_file17,
-        L: 119,
+        F: __dxlog_file16,
+        L: 172,
         S: this,
         C: (f, a) => f(...a)
       });
-      this._connected = true;
-    });
-    this._socket.on("error", (err) => {
-      this.errors.raise(err);
-    });
-    this._socket.on("close", () => {
-      this.closed.emit();
+    }
+    try {
+      transport.connectorStream.end();
+    } catch (error) {
+      import_log15.log.warn("connectorStream close error", {
+        message: error?.message
+      }, {
+        F: __dxlog_file16,
+        L: 177,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+    }
+    (0, import_log15.log)("closed", void 0, {
+      F: __dxlog_file16,
+      L: 179,
+      S: this,
+      C: (f, a) => f(...a)
     });
-    this.connected.emit();
-    this.options.stream.pipe(this._socket).pipe(this.options.stream);
   }
 };
+var createStateUpdater = (next) => {
+  return (state, err) => {
+    next({
+      connection: {
+        state,
+        ...err ? {
+          error: err.message
+        } : void 0
+      }
+    });
+  };
+};
 var createTeleportProtocolFactory = (onConnection, defaultParams) => {
   return (params) => {
     const teleport = new import_teleport.Teleport({
@@ -4282,26 +4359,21 @@ var createTeleportProtocolFactory = (onConnection, defaultParams) => {
   ConnectionState,
   EventType,
   FullyConnectedTopology,
-  LibDataChannelTransport,
   MAX_CONCURRENT_INITIATING_CONNECTIONS,
   MMSTTopology,
   MemoryTransport,
   MemoryTransportFactory,
-  SimplePeerTransport,
-  SimplePeerTransportProxy,
-  SimplePeerTransportProxyFactory,
-  SimplePeerTransportService,
+  RtcTransportProxy,
+  RtcTransportProxyFactory,
+  RtcTransportService,
   StarTopology,
   Swarm,
   SwarmMapper,
   SwarmMessenger,
   SwarmNetworkManager,
-  TcpTransport,
-  TcpTransportFactory,
   TransportKind,
   createIceProvider,
-  createLibDataChannelTransportFactory,
-  createSimplePeerTransportFactory,
+  createRtcTransportFactory,
   createTeleportProtocolFactory
 });
-//# sourceMappingURL=chunk-4YAYC7WN.cjs.map
+//# sourceMappingURL=chunk-MCPADZS5.cjs.map