@fkn/lib 0.9.23 → 0.9.25

package/messages-DvpKMTsY.d.ts

@@ -0,0 +1,28 @@
+//#region src/messages.d.ts
+declare const E2E_LOCKED_MESSAGE = "fkn:e2e-locked";
+declare const E2E_STALE_EPOCH_MESSAGE = "fkn:e2e-stale-epoch: this file is encrypted under a previous key you reset";
+declare const E2E_INTEGRITY_MESSAGE = "fkn:e2e-integrity: stored data failed its integrity check";
+/**
+ * "There is no object at this path", as a thing a caller can TEST rather than parse.
+ *
+ * osra's error boxer ships name, message, stack and cause ONLY, so this code survives same-realm
+ * hops but NOT the SharedWorker boundary; the message fallback in src/lib/storage.ts's rethrow is
+ * what carries absence across that hop and re-mints the coded error for apps. The message does not
+ * survive being reworded, which is the problem this exists to end: absence arrives in two
+ * completely different sentences depending on which half of the read failed, and every consumer
+ * was left regex-matching both. Ripple got one of them and missed the other, and a library quietly
+ * went un-backed-up for a day because a missing backup read as a transient error.
+ */
+declare const STORAGE_NOT_FOUND = "FKN_STORAGE_NOT_FOUND";
+/**
+ * "The api never answered", as a thing a caller can TEST, for the same reason as above and one
+ * more: a caller that relaxes anything when the server cannot be reached must never relax it on
+ * an ANSWERED error, because an answered 500 lands exactly when a key rotation or a setting flip
+ * may be propagating. The MESSAGE prefix is the wire contract: osra's error boxer ships name,
+ * message, stack and cause only, so a custom code does NOT survive the SharedWorker hop (the
+ * E2E_LOCKED_MESSAGE prefix match exists for exactly this reason). The code is still set for
+ * same-realm callers, which is the cheaper test when it is available.
+ */
+declare const STORAGE_UNREACHABLE = "FKN_API_UNREACHABLE";
+//#endregion
+export { STORAGE_UNREACHABLE as a, STORAGE_NOT_FOUND as i, E2E_LOCKED_MESSAGE as n, E2E_STALE_EPOCH_MESSAGE as r, E2E_INTEGRITY_MESSAGE as t };

package/messages.cjs

@@ -0,0 +1 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=`fkn:e2e-locked`,t=`fkn:e2e-stale-epoch: this file is encrypted under a previous key you reset`,n=`fkn:e2e-integrity: stored data failed its integrity check`,r=`FKN_STORAGE_NOT_FOUND`,i=`FKN_API_UNREACHABLE`;exports.E2E_INTEGRITY_MESSAGE=n,exports.E2E_LOCKED_MESSAGE=e,exports.E2E_STALE_EPOCH_MESSAGE=t,exports.STORAGE_NOT_FOUND=r,exports.STORAGE_UNREACHABLE=i;

package/messages.d.ts

@@ -0,0 +1,2 @@
+import { a as STORAGE_UNREACHABLE, i as STORAGE_NOT_FOUND, n as E2E_LOCKED_MESSAGE, r as E2E_STALE_EPOCH_MESSAGE, t as E2E_INTEGRITY_MESSAGE } from "./messages-DvpKMTsY.js";
+export { E2E_INTEGRITY_MESSAGE, E2E_LOCKED_MESSAGE, E2E_STALE_EPOCH_MESSAGE, STORAGE_NOT_FOUND, STORAGE_UNREACHABLE };

package/messages.js

@@ -0,0 +1,4 @@
+//#region src/messages.ts
+var e = "fkn:e2e-locked", t = "fkn:e2e-stale-epoch: this file is encrypted under a previous key you reset", n = "fkn:e2e-integrity: stored data failed its integrity check", r = "FKN_STORAGE_NOT_FOUND", i = "FKN_API_UNREACHABLE";
+//#endregion
+export { n as E2E_INTEGRITY_MESSAGE, e as E2E_LOCKED_MESSAGE, t as E2E_STALE_EPOCH_MESSAGE, r as STORAGE_NOT_FOUND, i as STORAGE_UNREACHABLE };

package/{net-DaWv81tQ.d.ts → net-DAOcF3Eb.d.ts}

@@ -1,10 +1,11 @@
-import { i as TcpSocketOption, r as LocalTcpSocket, t as Resolvers } from "./api-BGYSJVvR.js";
+import { o as TcpSocketOption } from "./wire-Gbo-D74t.js";
+import { B as TcpSocketListenerResult, H as TcpSocketResult, P as Resolvers } from "./contract-D6ksmIm6.js";
+import "./api-CesI0aMl.js";
 import { AddressInfo, ListenOptions, Server, ServerOpts, Socket, SocketConnectOpts, SocketConstructorOpts } from "net";
 import { DuplexOptions, Stream } from "stream";
 import { EventEmitter } from "events";
 import { BindOptions } from "dgram";
-
-//#region src/lib/webvpn/utils.d.ts
+//#region src/webvpn/utils.d.ts
 declare const isIPv4: (input: string) => boolean;
 declare const isIPv6: (input: string) => boolean;
 declare const isIP: (input: string) => 0 | 4 | 6;
@@ -45,7 +46,7 @@ declare class Socket$2 extends Stream.Duplex implements Socket {
    * the connection at all.
    */
   _busyRelease?: () => void;
-  __webvpn_tcp_socket_init__(connection: ReturnType<WebVpnTcpSocket>, endpoints?: Awaited<ReturnType<WebVpnTcpSocket>>): Promise<(LocalTcpSocket & {
+  __webvpn_tcp_socket_init__(connection: ReturnType<WebVpnTcpSocket>, endpoints?: Awaited<ReturnType<WebVpnTcpSocket>>): Promise<(TcpSocketResult & {
     reader: ReadableStreamDefaultReader<Uint8Array>;
     writer: WritableStreamDefaultWriter<Uint8Array>;
   }) | undefined>;
@@ -110,12 +111,7 @@ declare class Server$1 extends EventEmitter implements Server {
     connection?: ReturnType<WebVpnTcpSocketListener>;
   }, connectionListener?: (socket: Socket$2) => void);
   _busyRelease?: () => void;
-  __webvpn_tcp_socket_listener_init__(connection: ReturnType<WebVpnTcpSocketListener>): Promise<{
-    localAddress: string;
-    localFamily: "IPv4" | "IPv6";
-    localPort: number;
-    close: () => Promise<void>;
-  } | undefined>;
+  __webvpn_tcp_socket_listener_init__(connection: ReturnType<WebVpnTcpSocketListener>): Promise<TcpSocketListenerResult | undefined>;
   /**
    * Starts a TCP listener through WebVPN. Port and host forms are supported.
    * IPC paths and existing Node handles are not supported and reject at runtime.
@@ -151,12 +147,12 @@ declare const createServer: (options?: ServerOpts | ((socket: Socket$2) => void)
 declare const _default: {
   Socket: typeof Socket$2;
   Server: typeof Server$1;
-  connect: (options: SocketConnectOpts, connectionListener?: () => void) => Socket$2;
-  createConnection: (options: SocketConnectOpts, connectionListener?: () => void) => Socket$2;
-  createServer: (options?: ServerOpts | ((socket: Socket$2) => void), connectionListener?: (socket: Socket$2) => void) => Server$1;
-  isIP: (input: string) => 0 | 4 | 6;
-  isIPv4: (input: string) => boolean;
-  isIPv6: (input: string) => boolean;
+  connect: typeof connect;
+  createConnection: typeof createConnection;
+  createServer: typeof createServer;
+  isIP: typeof isIP;
+  isIPv4: typeof isIPv4;
+  isIPv6: typeof isIPv6;
 };
 //#endregion
 export { createConnection as a, isIP as c, connect as i, isIPv4 as l, Socket$2 as n, createServer as o, _default as r, net_d_exports as s, Server$1 as t, isIPv6 as u };

package/net.cjs

@@ -1 +1 @@
-Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:`Module`}});const e=require("./utils-QfNXtEhb.cjs"),t=require("./net-B6RHtWwe.cjs");exports.Server=t.t,exports.Socket=t.n,exports._default=t.r,exports.default=t.r,exports.connect=t.i,exports.createConnection=t.a,exports.createServer=t.o,exports.isIP=e.r,exports.isIPv4=e.i,exports.isIPv6=e.a;
+Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:`Module`}});const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./api-BCJO3EWi.cjs"),n=require("./busy-Dv8wzE5M.cjs"),r=require("./utils-BvgGdrgN.cjs");require("./wire.cjs");let i=require("stream"),a=require("events");var o=e.t({Server:()=>c,Socket:()=>s,_default:()=>f,connect:()=>l,createConnection:()=>u,createServer:()=>d,default:()=>f,isIP:()=>r.r,isIPv4:()=>r.i,isIPv6:()=>r.a}),s=class extends i.Stream.Duplex{_localAddress;_remoteAddress;_webVPNTcpSocketPromise;constructor(e){if(e?.fd!==void 0)throw Error(`FKN WebVPN does not support file descriptors`);super(e),e?.connection&&this.__webvpn_tcp_socket_init__(e.connection)}_busyRelease;__webvpn_tcp_socket_init__(e,t){if(this._busyRelease??=n.t(`tcp socket`),t&&(this._localAddress={address:t.localAddress,family:t.localFamily,port:t.localPort},this._remoteAddress={address:t.remoteAddress,family:t.remoteFamily,port:t.remotePort}),this._webVPNTcpSocketPromise=e.then(e=>{let t=e.dataReadableStream.getReader(),n=e.dataWritableStream.getWriter();return this._localAddress={address:e.localAddress,family:e.localFamily,port:e.localPort},this._remoteAddress={address:e.remoteAddress,family:e.remoteFamily,port:e.remotePort},{...e,reader:t,writer:n}}).catch(e=>{this.emit(`error`,e)}),!this._webVPNTcpSocketPromise)throw Error(`Socket not connected`);return this._webVPNTcpSocketPromise.then(e=>{if(!e){this._busyRelease?.();return}this.emit(`connect`)}),this._webVPNTcpSocketPromise}_read(e){if(!this._webVPNTcpSocketPromise)throw Error(`Socket not connected`);this._webVPNTcpSocketPromise.then(e=>{if(!e){this.push(null);return}e.reader.read().then(({value:e,done:t})=>{if(t){this.push(null);return}this._restartTimeoutTimer(),this.push(e)}).catch(e=>{this.destroy(e)})})}_write(e,t,n){if(!this._webVPNTcpSocketPromise){n(Error(`Socket not connected`));return}this._webVPNTcpSocketPromise.then(async t=>{if(!t)throw Error(`Socket not connected`);await t.writer.ready,await t.writer.write(e),this._restartTimeoutTimer(),n()}).catch(n)}connect(...e){let n=r.c(...e),i=this.__webvpn_tcp_socket_init__(t.o(`an outbound tcp socket`).then(e=>e.cloud.webvpn.tcpSocket({remoteAddress:n.host??`localhost`,remotePort:n.port})));return n.callback&&i.then(e=>{e&&n.callback.call(this)}),this}_final(e){if(!this._webVPNTcpSocketPromise){e();return}this._webVPNTcpSocketPromise.then(async e=>{e&&await e.writer.close()}).then(()=>e(),t=>e(t))}_destroy(e,t){if(this._timeoutTimer&&clearTimeout(this._timeoutTimer),this._busyRelease?.(),!this._webVPNTcpSocketPromise){t(e);return}this._webVPNTcpSocketPromise.then(async e=>{e&&await(this._resetRequested?e.resetAndDestroy():e.destroy())}).then(()=>t(e),()=>t(e))}destroySoon(){if(this.writableFinished){this.destroy();return}this.once(`finish`,()=>this.destroy()),this.end()}_resetRequested=!1;resetAndDestroy(){return this._resetRequested=!0,this.destroy(),this}_timeoutMs;_timeoutTimer;_restartTimeoutTimer(){this._timeoutTimer&&clearTimeout(this._timeoutTimer),this._timeoutMs&&(this._timeoutTimer=setTimeout(()=>this.emit(`timeout`),this._timeoutMs))}setTimeout(e,t){return t&&this.on(`timeout`,t),this._timeoutMs=e,this._restartTimeoutTimer(),this}setNoDelay(e){let t=e??!0;return this._setTcpOption({type:0,value:t}),this}setKeepAlive(e,t){let n=e??!1,r=t!==void 0&&t>0?Math.max(1,Math.round(t/1e3)):0;return this._setTcpOption({type:2,enabled:n,initialDelaySeconds:r}),this}setSendBufferSize(e){return this._setTcpOption({type:3,value:e}),this}setRecvBufferSize(e){return this._setTcpOption({type:4,value:e}),this}_typeOfService;getTypeOfService(){return this._typeOfService??0}setTypeOfService(e){return this._typeOfService=e,this}_setTcpOption(e){if(!this._webVPNTcpSocketPromise){this.emit(`error`,Error(`Cannot set socket option before connect`));return}this._webVPNTcpSocketPromise.then(async t=>{if(t)try{await t.setOption(e)}catch(e){this.emit(`error`,e)}})}write(e,t,...n){return super.write(e,t,...n)}address(){return this._localAddress??{}}unref(){return this}ref(){return this}autoSelectFamilyAttemptedAddresses;bufferSize;bytesRead;bytesWritten;connecting;pending;get localAddress(){if(!this._localAddress)throw Error(`Socket is not connected`);return this._localAddress.address}get localPort(){if(!this._localAddress)throw Error(`Socket is not connected`);return this._localAddress.port}get localFamily(){if(!this._localAddress)throw Error(`Socket is not connected`);return this._localAddress.family}readyState;get remoteAddress(){if(!this._remoteAddress)throw Error(`Socket is not connected`);return this._remoteAddress.address}get remotePort(){if(!this._remoteAddress)throw Error(`Socket is not connected`);return this._remoteAddress.port}get remoteFamily(){if(!this._remoteAddress)throw Error(`Socket is not connected`);return this._remoteAddress.family}timeout},c=class extends a.EventEmitter{_localAddress;_webVPNTcpSocketListenerPromise;constructor(e,t){super(e),t&&this.on(`connection`,t),e?.connection&&this.__webvpn_tcp_socket_listener_init__(e.connection)}_busyRelease;__webvpn_tcp_socket_listener_init__(e){return this._busyRelease??=n.t(`tcp server`),this._webVPNTcpSocketListenerPromise=e.then(e=>(this._localAddress={address:e.localAddress,family:e.localFamily,port:e.localPort},e)).catch(e=>{this.emit(`error`,e)}),this._webVPNTcpSocketListenerPromise.then(e=>{if(!e){this._busyRelease?.();return}this.emit(`listening`)}),this._webVPNTcpSocketListenerPromise}listen(...e){let n=r.c(...e);this._closeEmitted=!1;let i=e=>{let t=new s;t.__webvpn_tcp_socket_init__(Promise.resolve(e),e),this.emit(`connection`,t)},a=e=>{this._localAddress=void 0;try{e&&this.listenerCount(`error`)>0&&this.emit(`error`,e)}finally{this._emitClose()}},o=e=>t.o(`a tcp listener`).then(t=>t.cloud.webvpn.tcpSocketListener({localAddress:e,localPort:n.port,onConnection:i,onClose:a})),c=n.host?o(n.host):o(`::`).catch(()=>o(`0.0.0.0`)),l=this.__webvpn_tcp_socket_listener_init__(c);return n.callback&&l.then(e=>{e&&n.callback.call(this)}),this}_closeEmitted=!1;_emitClose(){this._closeEmitted||(this._closeEmitted=!0,this._busyRelease?.(),this.emit(`close`))}close(e){return this._webVPNTcpSocketListenerPromise&&this._webVPNTcpSocketListenerPromise.then(async t=>{if(t)try{await t.close(),this._localAddress=void 0,this._emitClose(),e&&e()}catch(t){this._localAddress=void 0,this._emitClose(),e&&e(t)}}),this}address(){return this._localAddress??null}getConnections(e){throw Error(`Method not implemented.`)}ref(){return this}unref(){return this}maxConnections;connections;listening;async[Symbol.asyncDispose](){}},l=(e,t)=>new s().connect(e,t),u=(e,t)=>new s().connect(e,t),d=(e,t)=>{typeof e==`function`&&(t=e,e=void 0);let n=new c(e);return t&&n.on(`connection`,t),n},f={Socket:s,Server:c,connect:l,createConnection:u,createServer:d,isIP:r.r,isIPv4:r.i,isIPv6:r.a};exports.Server=c,exports.Socket=s,exports._default=f,exports.default=f,exports.connect=l,exports.createConnection=u,exports.createServer=d,exports.isIP=r.r,exports.isIPv4=r.i,exports.isIPv6=r.a,Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return o}});

package/net.d.ts

@@ -1,2 +1,2 @@
-import { a as createConnection, c as isIP, i as connect, l as isIPv4, n as Socket, o as createServer, r as _default, t as Server, u as isIPv6 } from "./net-DaWv81tQ.js";
+import { a as createConnection, c as isIP, i as connect, l as isIPv4, n as Socket, o as createServer, r as _default, t as Server, u as isIPv6 } from "./net-DAOcF3Eb.js";
 export { Server, Socket, _default, _default as default, connect, createConnection, createServer, isIP, isIPv4, isIPv6 };

package/net.js

@@ -1,3 +1,318 @@
-import { a as e, i as t, r as n } from "./utils-DVlbuXmW.js";
-import { a as r, i, n as a, o, r as s, t as c } from "./net-yBkobZqK.js";
-export { c as Server, a as Socket, s as _default, s as default, i as connect, r as createConnection, o as createServer, n as isIP, t as isIPv4, e as isIPv6 };
+import { t as e } from "./rolldown-runtime-Dy4uBu1J.js";
+import { o as t } from "./api-DLvscoll.js";
+import { t as n } from "./busy-B189uX--.js";
+import { a as r, c as i, i as a, r as o } from "./utils-C-cAd4r4.js";
+import "./wire.js";
+import { Stream as s } from "stream";
+import { EventEmitter as c } from "events";
+//#region src/webvpn/net.ts
+var l = /* @__PURE__ */ e({
+	Server: () => d,
+	Socket: () => u,
+	_default: () => h,
+	connect: () => f,
+	createConnection: () => p,
+	createServer: () => m,
+	default: () => h,
+	isIP: () => o,
+	isIPv4: () => a,
+	isIPv6: () => r
+}), u = class extends s.Duplex {
+	_localAddress;
+	_remoteAddress;
+	_webVPNTcpSocketPromise;
+	constructor(e) {
+		if (e?.fd !== void 0) throw Error("FKN WebVPN does not support file descriptors");
+		super(e), e?.connection && this.__webvpn_tcp_socket_init__(e.connection);
+	}
+	_busyRelease;
+	__webvpn_tcp_socket_init__(e, t) {
+		if (this._busyRelease ??= n("tcp socket"), t && (this._localAddress = {
+			address: t.localAddress,
+			family: t.localFamily,
+			port: t.localPort
+		}, this._remoteAddress = {
+			address: t.remoteAddress,
+			family: t.remoteFamily,
+			port: t.remotePort
+		}), this._webVPNTcpSocketPromise = e.then((e) => {
+			let t = e.dataReadableStream.getReader(), n = e.dataWritableStream.getWriter();
+			return this._localAddress = {
+				address: e.localAddress,
+				family: e.localFamily,
+				port: e.localPort
+			}, this._remoteAddress = {
+				address: e.remoteAddress,
+				family: e.remoteFamily,
+				port: e.remotePort
+			}, {
+				...e,
+				reader: t,
+				writer: n
+			};
+		}).catch((e) => {
+			this.emit("error", e);
+		}), !this._webVPNTcpSocketPromise) throw Error("Socket not connected");
+		return this._webVPNTcpSocketPromise.then((e) => {
+			if (!e) {
+				this._busyRelease?.();
+				return;
+			}
+			this.emit("connect");
+		}), this._webVPNTcpSocketPromise;
+	}
+	_read(e) {
+		if (!this._webVPNTcpSocketPromise) throw Error("Socket not connected");
+		this._webVPNTcpSocketPromise.then((e) => {
+			if (!e) {
+				this.push(null);
+				return;
+			}
+			e.reader.read().then(({ value: e, done: t }) => {
+				if (t) {
+					this.push(null);
+					return;
+				}
+				this._restartTimeoutTimer(), this.push(e);
+			}).catch((e) => {
+				this.destroy(e);
+			});
+		});
+	}
+	_write(e, t, n) {
+		if (!this._webVPNTcpSocketPromise) {
+			n(/* @__PURE__ */ Error("Socket not connected"));
+			return;
+		}
+		this._webVPNTcpSocketPromise.then(async (t) => {
+			if (!t) throw Error("Socket not connected");
+			await t.writer.ready, await t.writer.write(e), this._restartTimeoutTimer(), n();
+		}).catch(n);
+	}
+	connect(...e) {
+		let n = i(...e), r = this.__webvpn_tcp_socket_init__(t("an outbound tcp socket").then((e) => e.cloud.webvpn.tcpSocket({
+			remoteAddress: n.host ?? "localhost",
+			remotePort: n.port
+		})));
+		return n.callback && r.then((e) => {
+			e && n.callback.call(this);
+		}), this;
+	}
+	_final(e) {
+		if (!this._webVPNTcpSocketPromise) {
+			e();
+			return;
+		}
+		this._webVPNTcpSocketPromise.then(async (e) => {
+			e && await e.writer.close();
+		}).then(() => e(), (t) => e(t));
+	}
+	_destroy(e, t) {
+		if (this._timeoutTimer && clearTimeout(this._timeoutTimer), this._busyRelease?.(), !this._webVPNTcpSocketPromise) {
+			t(e);
+			return;
+		}
+		this._webVPNTcpSocketPromise.then(async (e) => {
+			e && await (this._resetRequested ? e.resetAndDestroy() : e.destroy());
+		}).then(() => t(e), () => t(e));
+	}
+	destroySoon() {
+		if (this.writableFinished) {
+			this.destroy();
+			return;
+		}
+		this.once("finish", () => this.destroy()), this.end();
+	}
+	_resetRequested = !1;
+	resetAndDestroy() {
+		return this._resetRequested = !0, this.destroy(), this;
+	}
+	_timeoutMs;
+	_timeoutTimer;
+	_restartTimeoutTimer() {
+		this._timeoutTimer && clearTimeout(this._timeoutTimer), this._timeoutMs && (this._timeoutTimer = setTimeout(() => this.emit("timeout"), this._timeoutMs));
+	}
+	setTimeout(e, t) {
+		return t && this.on("timeout", t), this._timeoutMs = e, this._restartTimeoutTimer(), this;
+	}
+	setNoDelay(e) {
+		let t = e ?? !0;
+		return this._setTcpOption({
+			type: 0,
+			value: t
+		}), this;
+	}
+	setKeepAlive(e, t) {
+		let n = e ?? !1, r = t !== void 0 && t > 0 ? Math.max(1, Math.round(t / 1e3)) : 0;
+		return this._setTcpOption({
+			type: 2,
+			enabled: n,
+			initialDelaySeconds: r
+		}), this;
+	}
+	setSendBufferSize(e) {
+		return this._setTcpOption({
+			type: 3,
+			value: e
+		}), this;
+	}
+	setRecvBufferSize(e) {
+		return this._setTcpOption({
+			type: 4,
+			value: e
+		}), this;
+	}
+	_typeOfService;
+	getTypeOfService() {
+		return this._typeOfService ?? 0;
+	}
+	setTypeOfService(e) {
+		return this._typeOfService = e, this;
+	}
+	_setTcpOption(e) {
+		if (!this._webVPNTcpSocketPromise) {
+			this.emit("error", /* @__PURE__ */ Error("Cannot set socket option before connect"));
+			return;
+		}
+		this._webVPNTcpSocketPromise.then(async (t) => {
+			if (t) try {
+				await t.setOption(e);
+			} catch (e) {
+				this.emit("error", e);
+			}
+		});
+	}
+	write(e, t, ...n) {
+		return super.write(e, t, ...n);
+	}
+	address() {
+		return this._localAddress ?? {};
+	}
+	unref() {
+		return this;
+	}
+	ref() {
+		return this;
+	}
+	autoSelectFamilyAttemptedAddresses;
+	bufferSize;
+	bytesRead;
+	bytesWritten;
+	connecting;
+	pending;
+	get localAddress() {
+		if (!this._localAddress) throw Error("Socket is not connected");
+		return this._localAddress.address;
+	}
+	get localPort() {
+		if (!this._localAddress) throw Error("Socket is not connected");
+		return this._localAddress.port;
+	}
+	get localFamily() {
+		if (!this._localAddress) throw Error("Socket is not connected");
+		return this._localAddress.family;
+	}
+	readyState;
+	get remoteAddress() {
+		if (!this._remoteAddress) throw Error("Socket is not connected");
+		return this._remoteAddress.address;
+	}
+	get remotePort() {
+		if (!this._remoteAddress) throw Error("Socket is not connected");
+		return this._remoteAddress.port;
+	}
+	get remoteFamily() {
+		if (!this._remoteAddress) throw Error("Socket is not connected");
+		return this._remoteAddress.family;
+	}
+	timeout;
+}, d = class extends c {
+	_localAddress;
+	_webVPNTcpSocketListenerPromise;
+	constructor(e, t) {
+		super(e), t && this.on("connection", t), e?.connection && this.__webvpn_tcp_socket_listener_init__(e.connection);
+	}
+	_busyRelease;
+	__webvpn_tcp_socket_listener_init__(e) {
+		return this._busyRelease ??= n("tcp server"), this._webVPNTcpSocketListenerPromise = e.then((e) => (this._localAddress = {
+			address: e.localAddress,
+			family: e.localFamily,
+			port: e.localPort
+		}, e)).catch((e) => {
+			this.emit("error", e);
+		}), this._webVPNTcpSocketListenerPromise.then((e) => {
+			if (!e) {
+				this._busyRelease?.();
+				return;
+			}
+			this.emit("listening");
+		}), this._webVPNTcpSocketListenerPromise;
+	}
+	listen(...e) {
+		let n = i(...e);
+		this._closeEmitted = !1;
+		let r = (e) => {
+			let t = new u();
+			t.__webvpn_tcp_socket_init__(Promise.resolve(e), e), this.emit("connection", t);
+		}, a = (e) => {
+			this._localAddress = void 0;
+			try {
+				e && this.listenerCount("error") > 0 && this.emit("error", e);
+			} finally {
+				this._emitClose();
+			}
+		}, o = (e) => t("a tcp listener").then((t) => t.cloud.webvpn.tcpSocketListener({
+			localAddress: e,
+			localPort: n.port,
+			onConnection: r,
+			onClose: a
+		})), s = n.host ? o(n.host) : o("::").catch(() => o("0.0.0.0")), c = this.__webvpn_tcp_socket_listener_init__(s);
+		return n.callback && c.then((e) => {
+			e && n.callback.call(this);
+		}), this;
+	}
+	_closeEmitted = !1;
+	_emitClose() {
+		this._closeEmitted || (this._closeEmitted = !0, this._busyRelease?.(), this.emit("close"));
+	}
+	close(e) {
+		return this._webVPNTcpSocketListenerPromise && this._webVPNTcpSocketListenerPromise.then(async (t) => {
+			if (t) try {
+				await t.close(), this._localAddress = void 0, this._emitClose(), e && e();
+			} catch (t) {
+				this._localAddress = void 0, this._emitClose(), e && e(t);
+			}
+		}), this;
+	}
+	address() {
+		return this._localAddress ?? null;
+	}
+	getConnections(e) {
+		throw Error("Method not implemented.");
+	}
+	ref() {
+		return this;
+	}
+	unref() {
+		return this;
+	}
+	maxConnections;
+	connections;
+	listening;
+	async [Symbol.asyncDispose]() {}
+}, f = (e, t) => new u().connect(e, t), p = (e, t) => new u().connect(e, t), m = (e, t) => {
+	typeof e == "function" && (t = e, e = void 0);
+	let n = new d(e);
+	return t && n.on("connection", t), n;
+}, h = {
+	Socket: u,
+	Server: d,
+	connect: f,
+	createConnection: p,
+	createServer: m,
+	isIP: o,
+	isIPv4: a,
+	isIPv6: r
+};
+//#endregion
+export { d as Server, u as Socket, h as _default, h as default, f as connect, p as createConnection, m as createServer, o as isIP, a as isIPv4, r as isIPv6, l as t };

package/{node-fs-BZCQUmeE.js → node-fs-C9ECR_9H.js}

@@ -1,6 +1,6 @@
-import { r as e } from "./busy-Bp1E3JPT.js";
+import { r as e } from "./busy-B189uX--.js";
 import { Buffer as t } from "buffer";
-//#region src/lib/fs/content-type.ts
+//#region src/fs/content-type.ts
 var n = {
 	json: "application/json",
 	txt: "text/plain",

package/opfs/promises.d.ts

@@ -1,12 +1,11 @@
-import { a as Stats, i as ReadOptions, o as WriteData, r as MakeOptions, s as WriteOptions } from "../index-CJ0vHTcS.js";
+import { a as WriteData, i as Stats, n as MakeOptions, o as WriteOptions, r as ReadOptions } from "../index-BQgZVQl7.js";
 import { promises } from "../opfs.js";
-
-//#region src/lib/opfs/promises.d.ts
+//#region src/opfs/promises.d.ts
 declare const readFile: (path: import("node:fs").PathLike, options?: ReadOptions) => Promise<Buffer | string>, writeFile: (path: import("node:fs").PathLike, data: WriteData, options?: WriteOptions) => Promise<void>, appendFile: (path: import("node:fs").PathLike, data: WriteData, options?: WriteOptions) => Promise<void>, unlink: (path: import("node:fs").PathLike) => Promise<void>, rename: (from: import("node:fs").PathLike, to: import("node:fs").PathLike) => Promise<void>, readdir: (path: import("node:fs").PathLike) => Promise<string[]>, mkdir: (path: import("node:fs").PathLike, options?: MakeOptions) => Promise<void>, rm: (path: import("node:fs").PathLike, options?: {
-    recursive?: boolean;
-    force?: boolean;
-  }) => Promise<void>, rmdir: (path: import("node:fs").PathLike, options?: {
-    recursive?: boolean;
-  }) => Promise<void>, stat: (path: import("node:fs").PathLike) => Promise<Stats>, lstat: (path: import("node:fs").PathLike) => Promise<Stats>, access: (path: import("node:fs").PathLike) => Promise<void>;
+  recursive?: boolean;
+  force?: boolean;
+}) => Promise<void>, rmdir: (path: import("node:fs").PathLike, options?: {
+  recursive?: boolean;
+}) => Promise<void>, stat: (path: import("node:fs").PathLike) => Promise<Stats>, lstat: (path: import("node:fs").PathLike) => Promise<Stats>, access: (path: import("node:fs").PathLike) => Promise<void>;
 //#endregion
 export { access, appendFile, promises as default, lstat, mkdir, readFile, readdir, rename, rm, rmdir, stat, unlink, writeFile };

package/opfs/promises.js

@@ -1,5 +1,5 @@
 import { promises as e } from "../opfs.js";
-//#region src/lib/opfs/promises.ts
+//#region src/opfs/promises.ts
 var { readFile: t, writeFile: n, appendFile: r, unlink: i, rename: a, readdir: o, mkdir: s, rm: c, rmdir: l, stat: u, lstat: d, access: f } = e, p = e;
 //#endregion
 export { f as access, r as appendFile, p as default, d as lstat, s as mkdir, t as readFile, o as readdir, a as rename, c as rm, l as rmdir, u as stat, i as unlink, n as writeFile };

package/{opfs-BibrNGF0.js → opfs-D0goLAQW.js}

@@ -1,5 +1,5 @@
 import { t as e } from "./rolldown-runtime-Dy4uBu1J.js";
-//#region src/lib/fs/opfs.ts
+//#region src/fs/opfs.ts
 var t = /* @__PURE__ */ e({
 	available: () => a,
 	list: () => l,

package/opfs.d.ts

@@ -1,6 +1,4 @@
-import { a as Stats, i as ReadOptions, n as Callback, o as WriteData, r as MakeOptions, s as WriteOptions } from "./index-CJ0vHTcS.js";
-
-//#region src/lib/opfs/index.d.ts
+import { a as WriteData, i as Stats, n as MakeOptions, o as WriteOptions, r as ReadOptions, t as Callback } from "./index-BQgZVQl7.js";
 declare namespace index_d_exports {
   export { Stats, appendFile, appendFileSync, available, fs as default, exists, existsSync, flush, lstatSync, mkdir, mkdirSync, mount, promises, readFile, readFileSync, readdir, readdirSync, remount, rename, renameSync, rm, rmSync, rmdirSync, stat, statSync, unlink, unlinkSync, writeFile, writeFileSync };
 }
@@ -60,31 +58,31 @@ declare const fs: {
   remount: () => Promise<void>;
 };
 declare const available: () => Promise<boolean>, readFileSync: (path: import("node:fs").PathLike, options?: ReadOptions) => Buffer | string, writeFileSync: (path: import("node:fs").PathLike, data: WriteData, options?: WriteOptions) => void, appendFileSync: (path: import("node:fs").PathLike, data: WriteData, options?: WriteOptions) => void, existsSync: (path: import("node:fs").PathLike) => boolean, statSync: (path: import("node:fs").PathLike) => Stats, lstatSync: (path: import("node:fs").PathLike) => Stats, readdirSync: (path: import("node:fs").PathLike) => string[], mkdirSync: (path: import("node:fs").PathLike, options?: MakeOptions) => void, rmSync: (path: import("node:fs").PathLike, options?: {
+  recursive?: boolean;
+  force?: boolean;
+}) => void, rmdirSync: (path: import("node:fs").PathLike, options?: {
+  recursive?: boolean;
+}) => void, unlinkSync: (path: import("node:fs").PathLike) => void, renameSync: (from: import("node:fs").PathLike, to: import("node:fs").PathLike) => void, readFile: (path: import("node:fs").PathLike, a: ReadOptions | Callback<Buffer | string>, b?: Callback<Buffer | string>) => void, writeFile: (path: import("node:fs").PathLike, data: WriteData, a: WriteOptions | Callback<void>, b?: Callback<void>) => void, appendFile: (path: import("node:fs").PathLike, data: WriteData, a: WriteOptions | Callback<void>, b?: Callback<void>) => void, stat: (path: import("node:fs").PathLike, callback: Callback<Stats>) => void, readdir: (path: import("node:fs").PathLike, a: unknown, b?: Callback<string[]>) => void, mkdir: (path: import("node:fs").PathLike, a: MakeOptions | Callback<void>, b?: Callback<void>) => void, rm: (path: import("node:fs").PathLike, a: {
+  recursive?: boolean;
+  force?: boolean;
+} | Callback<void>, b?: Callback<void>) => void, unlink: (path: import("node:fs").PathLike, callback: Callback<void>) => void, rename: (from: import("node:fs").PathLike, to: import("node:fs").PathLike, callback: Callback<void>) => void, exists: (path: import("node:fs").PathLike, callback: (exists: boolean) => void) => void, promises: {
+  readFile: (path: import("node:fs").PathLike, options?: ReadOptions) => Promise<Buffer | string>;
+  writeFile: (path: import("node:fs").PathLike, data: WriteData, options?: WriteOptions) => Promise<void>;
+  appendFile: (path: import("node:fs").PathLike, data: WriteData, options?: WriteOptions) => Promise<void>;
+  stat: (path: import("node:fs").PathLike) => Promise<Stats>;
+  lstat: (path: import("node:fs").PathLike) => Promise<Stats>;
+  readdir: (path: import("node:fs").PathLike) => Promise<string[]>;
+  mkdir: (path: import("node:fs").PathLike, options?: MakeOptions) => Promise<void>;
+  rm: (path: import("node:fs").PathLike, options?: {
     recursive?: boolean;
     force?: boolean;
-  }) => void, rmdirSync: (path: import("node:fs").PathLike, options?: {
+  }) => Promise<void>;
+  rmdir: (path: import("node:fs").PathLike, options?: {
     recursive?: boolean;
-  }) => void, unlinkSync: (path: import("node:fs").PathLike) => void, renameSync: (from: import("node:fs").PathLike, to: import("node:fs").PathLike) => void, readFile: (path: import("node:fs").PathLike, a: ReadOptions | Callback<Buffer | string>, b?: Callback<Buffer | string>) => void, writeFile: (path: import("node:fs").PathLike, data: WriteData, a: WriteOptions | Callback<void>, b?: Callback<void>) => void, appendFile: (path: import("node:fs").PathLike, data: WriteData, a: WriteOptions | Callback<void>, b?: Callback<void>) => void, stat: (path: import("node:fs").PathLike, callback: Callback<Stats>) => void, readdir: (path: import("node:fs").PathLike, a: unknown, b?: Callback<string[]>) => void, mkdir: (path: import("node:fs").PathLike, a: MakeOptions | Callback<void>, b?: Callback<void>) => void, rm: (path: import("node:fs").PathLike, a: {
-    recursive?: boolean;
-    force?: boolean;
-  } | Callback<void>, b?: Callback<void>) => void, unlink: (path: import("node:fs").PathLike, callback: Callback<void>) => void, rename: (from: import("node:fs").PathLike, to: import("node:fs").PathLike, callback: Callback<void>) => void, exists: (path: import("node:fs").PathLike, callback: (exists: boolean) => void) => void, promises: {
-    readFile: (path: import("node:fs").PathLike, options?: ReadOptions) => Promise<Buffer | string>;
-    writeFile: (path: import("node:fs").PathLike, data: WriteData, options?: WriteOptions) => Promise<void>;
-    appendFile: (path: import("node:fs").PathLike, data: WriteData, options?: WriteOptions) => Promise<void>;
-    stat: (path: import("node:fs").PathLike) => Promise<Stats>;
-    lstat: (path: import("node:fs").PathLike) => Promise<Stats>;
-    readdir: (path: import("node:fs").PathLike) => Promise<string[]>;
-    mkdir: (path: import("node:fs").PathLike, options?: MakeOptions) => Promise<void>;
-    rm: (path: import("node:fs").PathLike, options?: {
-      recursive?: boolean;
-      force?: boolean;
-    }) => Promise<void>;
-    rmdir: (path: import("node:fs").PathLike, options?: {
-      recursive?: boolean;
-    }) => Promise<void>;
-    unlink: (path: import("node:fs").PathLike) => Promise<void>;
-    rename: (from: import("node:fs").PathLike, to: import("node:fs").PathLike) => Promise<void>;
-    access: (path: import("node:fs").PathLike) => Promise<void>;
-  }, mount: () => Promise<void>, flush: () => Promise<void>, remount: () => Promise<void>;
+  }) => Promise<void>;
+  unlink: (path: import("node:fs").PathLike) => Promise<void>;
+  rename: (from: import("node:fs").PathLike, to: import("node:fs").PathLike) => Promise<void>;
+  access: (path: import("node:fs").PathLike) => Promise<void>;
+}, mount: () => Promise<void>, flush: () => Promise<void>, remount: () => Promise<void>;
 //#endregion
 export { type Stats, appendFile, appendFileSync, available, fs as default, exists, existsSync, flush, lstatSync, mkdir, mkdirSync, mount, promises, readFile, readFileSync, readdir, readdirSync, remount, rename, renameSync, rm, rmSync, rmdirSync, stat, statSync, index_d_exports as t, unlink, unlinkSync, writeFile, writeFileSync };

package/opfs.js

@@ -1,7 +1,7 @@
 import { t as e } from "./rolldown-runtime-Dy4uBu1J.js";
-import { t } from "./node-fs-BZCQUmeE.js";
-import { r as n } from "./opfs-BibrNGF0.js";
-//#region src/lib/opfs/index.ts
+import { t } from "./node-fs-C9ECR_9H.js";
+import { r as n } from "./opfs-D0goLAQW.js";
+//#region src/opfs/index.ts
 var r = /* @__PURE__ */ e({
 	appendFile: () => b,
 	appendFileSync: () => c,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fkn/lib",
-  "version": "0.9.23",
+  "version": "0.9.25",
   "main": "index.js",
   "types": "index.d.ts",
   "type": "module",
@@ -115,12 +115,37 @@
       "import": "./react.js",
       "require": "./react.cjs"
     },
+    "./contract": {
+      "types": "./contract.d.ts",
+      "import": "./contract.js",
+      "require": "./contract.cjs"
+    },
+    "./wire": {
+      "types": "./wire.d.ts",
+      "import": "./wire.js",
+      "require": "./wire.cjs"
+    },
+    "./messages": {
+      "types": "./messages.d.ts",
+      "import": "./messages.js",
+      "require": "./messages.cjs"
+    },
+    "./attach-policy": {
+      "types": "./attach-policy.d.ts",
+      "import": "./attach-policy.js",
+      "require": "./attach-policy.cjs"
+    },
+    "./api": {
+      "types": "./api.d.ts",
+      "import": "./api.js",
+      "require": "./api.cjs"
+    },
     "./package.json": "./package.json"
   },
   "dependencies": {
     "ip-address": "^10.1.0",
     "osra": "^0.6.4",
-    "@types/node": "^25.2.1"
+    "@types/node": "^25.9.5"
   },
   "peerDependencies": {
     "react": ">=18"