@floegence/flowersec-core 0.26.0 → 2.0.0

package/dist/gen/flowersec/tunnel/v1.gen.js

@@ -1,104 +0,0 @@
-// Code generated by idlgen. DO NOT EDIT.
-/** Endpoint role for tunnel attach. */
-export var Role;
-(function (Role) {
-    /** Client endpoint. */
-    Role[Role["Role_client"] = 1] = "Role_client";
-    /** Server endpoint. */
-    Role[Role["Role_server"] = 2] = "Role_server";
-})(Role || (Role = {}));
-function isRecord(v) {
-    return typeof v === "object" && v != null && !Array.isArray(v);
-}
-function assertString(name, v) {
-    if (typeof v !== "string")
-        throw new Error(`bad ${name}`);
-    return v;
-}
-function assertBoolean(name, v) {
-    if (typeof v !== "boolean")
-        throw new Error(`bad ${name}`);
-    return v;
-}
-function assertSafeInt(name, v) {
-    if (typeof v !== "number" || !Number.isSafeInteger(v))
-        throw new Error(`bad ${name}`);
-    return v;
-}
-function assertU32(name, v) {
-    const n = assertSafeInt(name, v);
-    if (n < 0 || n > 0xffffffff)
-        throw new Error(`bad ${name}`);
-    return n;
-}
-function assertU16(name, v) {
-    const n = assertU32(name, v);
-    if (n > 0xffff)
-        throw new Error(`bad ${name}`);
-    return n;
-}
-function assertU8(name, v) {
-    const n = assertU32(name, v);
-    if (n > 0xff)
-        throw new Error(`bad ${name}`);
-    return n;
-}
-function assertU64(name, v) {
-    const n = assertSafeInt(name, v);
-    if (n < 0)
-        throw new Error(`bad ${name}`);
-    return n;
-}
-function assertI32(name, v) {
-    const n = assertSafeInt(name, v);
-    if (n < -2147483648 || n > 2147483647)
-        throw new Error(`bad ${name}`);
-    return n;
-}
-function assertI64(name, v) {
-    return assertSafeInt(name, v);
-}
-function assertStringMap(name, v) {
-    if (!isRecord(v))
-        throw new Error(`bad ${name}`);
-    for (const [k, vv] of Object.entries(v)) {
-        void k;
-        if (typeof vv !== "string")
-            throw new Error(`bad ${name}`);
-    }
-    return v;
-}
-const _RoleValues = new Set([
-    1,
-    2,
-]);
-function assertRole(name, v) {
-    const n = assertSafeInt(name, v);
-    if (!_RoleValues.has(n))
-        throw new Error(`bad ${name}`);
-    return n;
-}
-export function assertAttach(v) {
-    if (!isRecord(v))
-        throw new Error("bad Attach");
-    const o = v;
-    if (o["v"] === undefined)
-        throw new Error("bad Attach.v");
-    assertU32("Attach.v", o["v"]);
-    if (o["channel_id"] === undefined)
-        throw new Error("bad Attach.channel_id");
-    assertString("Attach.channel_id", o["channel_id"]);
-    if (o["role"] === undefined)
-        throw new Error("bad Attach.role");
-    assertRole("Attach.role", o["role"]);
-    if (o["token"] === undefined)
-        throw new Error("bad Attach.token");
-    assertString("Attach.token", o["token"]);
-    if (o["endpoint_instance_id"] === undefined)
-        throw new Error("bad Attach.endpoint_instance_id");
-    assertString("Attach.endpoint_instance_id", o["endpoint_instance_id"]);
-    if (o["caps"] !== undefined) {
-        assertStringMap("Attach.caps", o["caps"]);
-    }
-    return o;
-}

package/dist/index.d.ts

@@ -1,22 +0,0 @@
-export * from "./utils/base64url.js";
-export * from "./utils/bin.js";
-export * from "./utils/errors.js";
-export * from "./framing/index.js";
-export * from "./streamio/index.js";
-export * from "./e2ee/constants.js";
-export * from "./e2ee/framing.js";
-export * from "./e2ee/transcript.js";
-export * from "./e2ee/kdf.js";
-export * from "./e2ee/record.js";
-export * from "./e2ee/secureChannel.js";
-export * from "./e2ee/handshake.js";
-export * from "./e2ee/errors.js";
-export * from "./client.js";
-export * from "./client-connect/transportSecurity.js";
-export * from "./observability/index.js";
-export * from "./ws-client/binaryTransport.js";
-export * from "./yamux/index.js";
-export * from "./rpc/index.js";
-export * from "./streamhello/index.js";
-export * from "./tunnel-client/index.js";
-export * from "./direct-client/index.js";

package/dist/index.js

@@ -1,22 +0,0 @@
-export * from "./utils/base64url.js";
-export * from "./utils/bin.js";
-export * from "./utils/errors.js";
-export * from "./framing/index.js";
-export * from "./streamio/index.js";
-export * from "./e2ee/constants.js";
-export * from "./e2ee/framing.js";
-export * from "./e2ee/transcript.js";
-export * from "./e2ee/kdf.js";
-export * from "./e2ee/record.js";
-export * from "./e2ee/secureChannel.js";
-export * from "./e2ee/handshake.js";
-export * from "./e2ee/errors.js";
-export * from "./client.js";
-export * from "./client-connect/transportSecurity.js";
-export * from "./observability/index.js";
-export * from "./ws-client/binaryTransport.js";
-export * from "./yamux/index.js";
-export * from "./rpc/index.js";
-export * from "./streamhello/index.js";
-export * from "./tunnel-client/index.js";
-export * from "./direct-client/index.js";

package/dist/node/connect.d.ts

@@ -1,12 +0,0 @@
-import type { Client } from "../client.js";
-import type { DirectConnectOptions } from "../direct-client/connect.js";
-import type { TunnelConnectOptions } from "../tunnel-client/connect.js";
-import { type ConnectOptions } from "../facade.js";
-import type { ConnectArtifact } from "../connect/artifact.js";
-import type { ChannelInitGrant } from "../gen/flowersec/controlplane/v1.gen.js";
-import type { DirectConnectInfo } from "../gen/flowersec/direct/v1.gen.js";
-export declare function connectNode(input: DirectConnectInfo, opts: DirectConnectOptions): Promise<Client>;
-export declare function connectNode(input: ChannelInitGrant, opts: TunnelConnectOptions): Promise<Client>;
-export declare function connectNode(input: ConnectArtifact, opts: ConnectOptions): Promise<Client>;
-export declare function connectTunnelNode(grant: ChannelInitGrant, opts: TunnelConnectOptions): Promise<Client>;
-export declare function connectDirectNode(info: DirectConnectInfo, opts: DirectConnectOptions): Promise<Client>;

package/dist/node/connect.js

@@ -1,29 +0,0 @@
-import { connectDirect } from "../direct-client/connect.js";
-import { connectTunnel } from "../tunnel-client/connect.js";
-import { connect } from "../facade.js";
-import { createNodeWsFactory } from "./wsFactory.js";
-import { defaultWsMaxPayload } from "./wsDefaults.js";
-export async function connectNode(input, opts) {
-    const wsFactory = opts.wsFactory ??
-        createNodeWsFactory({
-            maxPayload: defaultWsMaxPayload(opts),
-            perMessageDeflate: false,
-        });
-    return await connect(input, { ...opts, wsFactory });
-}
-export async function connectTunnelNode(grant, opts) {
-    const wsFactory = opts.wsFactory ??
-        createNodeWsFactory({
-            maxPayload: defaultWsMaxPayload(opts),
-            perMessageDeflate: false,
-        });
-    return await connectTunnel(grant, { ...opts, wsFactory });
-}
-export async function connectDirectNode(info, opts) {
-    const wsFactory = opts.wsFactory ??
-        createNodeWsFactory({
-            maxPayload: defaultWsMaxPayload(opts),
-            perMessageDeflate: false,
-        });
-    return await connectDirect(info, { ...opts, wsFactory });
-}

package/dist/node/reconnectConfig.d.ts

@@ -1,16 +0,0 @@
-import type { ClientObserverLike } from "../observability/observer.js";
-import type { DirectConnectOptions } from "../direct-client/connect.js";
-import type { TunnelConnectOptions } from "../tunnel-client/connect.js";
-import type { AutoReconnectConfig, ConnectConfig as ReconnectConnectConfig } from "../reconnect/index.js";
-import { type ArtifactSource } from "../reconnect/artifactControlplane.js";
-export type NodeReconnectConfig = Readonly<{
-    source: ArtifactSource;
-    connect?: Omit<TunnelConnectOptions, "observer" | "signal"> | Omit<DirectConnectOptions, "observer" | "signal">;
-    observer?: ClientObserverLike;
-    autoReconnect?: AutoReconnectConfig;
-}>;
-export type TunnelNodeReconnectConfig = NodeReconnectConfig;
-export type DirectNodeReconnectConfig = NodeReconnectConfig;
-export declare function createNodeReconnectConfig(config: NodeReconnectConfig): ReconnectConnectConfig;
-export declare const createTunnelNodeReconnectConfig: typeof createNodeReconnectConfig;
-export declare const createDirectNodeReconnectConfig: typeof createNodeReconnectConfig;

package/dist/node/reconnectConfig.js

@@ -1,20 +0,0 @@
-import { createArtifactResolver, updateTraceId } from "../reconnect/artifactControlplane.js";
-import { connectNode } from "./connect.js";
-export function createNodeReconnectConfig(config) {
-    if (config.source.kind === "once" && config.autoReconnect?.enabled) {
-        throw new Error("automatic reconnect requires a refreshable artifact source");
-    }
-    let traceId = config.source.kind === "once" ? config.source.artifact.correlation?.trace_id : undefined;
-    const acquire = createArtifactResolver(config.source);
-    return {
-        ...(config.observer === undefined ? {} : { observer: config.observer }),
-        ...(config.autoReconnect === undefined ? {} : { autoReconnect: config.autoReconnect }),
-        connectOnce: async ({ signal, observer }) => {
-            const artifact = await acquire({ ...(traceId === undefined ? {} : { traceId }), signal });
-            traceId = updateTraceId(traceId, artifact);
-            return await connectNode(artifact, { ...(config.connect ?? {}), signal, observer });
-        },
-    };
-}
-export const createTunnelNodeReconnectConfig = createNodeReconnectConfig;
-export const createDirectNodeReconnectConfig = createNodeReconnectConfig;

package/dist/observability/index.d.ts

@@ -1 +0,0 @@
-export * from "./observer.js";

package/dist/observability/index.js

@@ -1 +0,0 @@
-export * from "./observer.js";

package/dist/observability/observer.d.ts

@@ -1,52 +0,0 @@
-import type { ClientPath } from "../client.js";
-export type ConnectResult = "ok" | "fail";
-export type ConnectReason = "websocket_error" | "websocket_closed" | "timeout" | "canceled";
-export type AttachResult = "ok" | "fail";
-export type AttachReason = "send_failed" | "too_many_connections" | "expected_attach" | "invalid_attach" | "invalid_token" | "channel_mismatch" | "role_mismatch" | "init_exp_mismatch" | "idle_timeout_mismatch" | "token_replay" | "tenant_mismatch" | "policy_denied" | "policy_error" | "replace_rate_limited" | "attach_failed" | "timeout" | "canceled";
-export type HandshakeResult = "ok" | "fail";
-export type HandshakeReason = "auth_tag_mismatch" | "handshake_failed" | "invalid_suite" | "invalid_version" | "timestamp_after_init_exp" | "timestamp_out_of_skew" | "timeout" | "canceled";
-export type WsCloseKind = "local" | "peer_or_error";
-export type WsErrorReason = "error" | "recv_buffer_exceeded" | "send_buffer_exceeded" | "send_buffer_timeout" | "unexpected_text_frame" | "unexpected_message_type";
-export type RpcCallResult = "ok" | "rpc_error" | "handler_not_found" | "transport_error" | "canceled";
-export type DiagnosticEvent = Readonly<{
-    v: 1;
-    namespace: "connect";
-    path: ClientPath | "auto";
-    stage: "validate" | "normalize" | "scope" | "connect" | "attach" | "handshake" | "transport" | "yamux" | "rpc" | "close" | "reconnect";
-    code_domain: "error" | "event";
-    code: string;
-    result: "ok" | "fail" | "retry" | "skip";
-    elapsed_ms: number;
-    attempt_seq: number;
-    trace_id?: string;
-    session_id?: string;
-    resource?: string;
-    current?: number;
-    limit?: number;
-}>;
-type ObserverContext = Readonly<{
-    path?: ClientPath | "auto";
-    traceId?: string;
-    sessionId?: string;
-    attemptSeq?: number;
-    attemptStartMs?: number;
-    maxQueuedItems?: number;
-}>;
-export type ClientObserver = {
-    onConnect(path: ClientPath, result: ConnectResult, reason: ConnectReason | undefined, elapsedSeconds: number): void;
-    onAttach(result: AttachResult, reason: AttachReason | undefined): void;
-    onHandshake(path: ClientPath, result: HandshakeResult, reason: HandshakeReason | undefined, elapsedSeconds: number): void;
-    onWsClose(kind: WsCloseKind, code?: number): void;
-    onWsError(reason: WsErrorReason): void;
-    onRpcCall(result: RpcCallResult, elapsedSeconds: number): void;
-    onRpcNotify(): void;
-    onDiagnosticEvent(event: DiagnosticEvent): void;
-};
-export type ClientObserverLike = Partial<ClientObserver>;
-type DiagnosticEventInput = Omit<DiagnosticEvent, "v" | "namespace" | "elapsed_ms" | "attempt_seq" | "trace_id" | "session_id" | "path"> & Partial<Pick<DiagnosticEvent, "path">>;
-export declare const NoopObserver: ClientObserver;
-export declare function withObserverContext(observer: ClientObserverLike | undefined, context: ObserverContext): ClientObserverLike | undefined;
-export declare function emitObserverDiagnostic(observer: ClientObserverLike | undefined, event: DiagnosticEventInput): void;
-export declare function normalizeObserver(observer?: ClientObserverLike, context?: ObserverContext): ClientObserver;
-export declare function nowSeconds(): number;
-export {};

package/dist/observability/observer.js

@@ -1,314 +0,0 @@
-const OBSERVER_CONTEXT = Symbol.for("floegence.flowersec.observer_context");
-const NORMALIZED_OBSERVER = Symbol.for("floegence.flowersec.normalized_observer");
-const DEFAULT_MAX_QUEUED_ITEMS = 64;
-export const NoopObserver = {
-    onConnect: () => { },
-    onAttach: () => { },
-    onHandshake: () => { },
-    onWsClose: () => { },
-    onWsError: () => { },
-    onRpcCall: () => { },
-    onRpcNotify: () => { },
-    onDiagnosticEvent: () => { },
-};
-function getObserverContext(observer) {
-    const context = observer?.[OBSERVER_CONTEXT];
-    if (context == null || typeof context !== "object")
-        return {};
-    return context;
-}
-function safeInvoke(fn) {
-    if (fn == null)
-        return;
-    try {
-        fn();
-    }
-    catch {
-        // Best effort only; observability must not affect connect semantics.
-    }
-}
-function hasAnyHandlers(observer) {
-    if (observer == null)
-        return false;
-    return (observer.onConnect != null ||
-        observer.onAttach != null ||
-        observer.onHandshake != null ||
-        observer.onWsClose != null ||
-        observer.onWsError != null ||
-        observer.onRpcCall != null ||
-        observer.onRpcNotify != null ||
-        observer.onDiagnosticEvent != null);
-}
-function buildDiagnosticEvent(context, event) {
-    return Object.freeze({
-        v: 1,
-        namespace: "connect",
-        path: event.path ?? context.path ?? "auto",
-        stage: event.stage,
-        code_domain: event.code_domain,
-        code: event.code,
-        result: event.result,
-        elapsed_ms: Math.max(0, Math.floor(nowMilliseconds() - (context.attemptStartMs ?? nowMilliseconds()))),
-        attempt_seq: Math.max(1, Math.floor(context.attemptSeq ?? 1)),
-        ...(context.traceId === undefined ? {} : { trace_id: context.traceId }),
-        ...(context.sessionId === undefined
-            ? {}
-            : { session_id: context.sessionId }),
-        ...(event.resource === undefined ? {} : { resource: event.resource }),
-        ...(event.current === undefined ? {} : { current: event.current }),
-        ...(event.limit === undefined ? {} : { limit: event.limit }),
-    });
-}
-function mapConnectDiagnostic(path, result, reason) {
-    if (result === "ok") {
-        return {
-            path,
-            stage: "connect",
-            code_domain: "event",
-            code: "connect_ok",
-            result: "ok",
-        };
-    }
-    return {
-        path,
-        stage: "connect",
-        code_domain: "error",
-        code: reason === "timeout" || reason === "canceled" ? reason : "dial_failed",
-        result: "fail",
-    };
-}
-function mapAttachDiagnostic(result, reason, path) {
-    if (result === "ok") {
-        return {
-            path,
-            stage: "attach",
-            code_domain: "event",
-            code: "attach_ok",
-            result: "ok",
-        };
-    }
-    return {
-        path,
-        stage: "attach",
-        code_domain: "error",
-        code: reason === "send_failed" ? "attach_failed" : (reason ?? "attach_failed"),
-        result: "fail",
-    };
-}
-function mapHandshakeDiagnostic(path, result, reason) {
-    if (result === "ok") {
-        return {
-            path,
-            stage: "handshake",
-            code_domain: "event",
-            code: "handshake_ok",
-            result: "ok",
-        };
-    }
-    return {
-        path,
-        stage: "handshake",
-        code_domain: "error",
-        code: reason ?? "handshake_failed",
-        result: "fail",
-    };
-}
-function mapWsCloseDiagnostic(kind, path) {
-    return {
-        path,
-        stage: "close",
-        code_domain: "event",
-        code: kind === "local" ? "ws_close_local" : "ws_close_peer_or_error",
-        result: "skip",
-    };
-}
-function mapWsErrorDiagnostic(path) {
-    return {
-        path,
-        stage: "close",
-        code_domain: "event",
-        code: "ws_error",
-        result: "skip",
-    };
-}
-class ObserverDispatcher {
-    [NORMALIZED_OBSERVER] = true;
-    [OBSERVER_CONTEXT];
-    queue = [];
-    observer;
-    maxQueuedItems;
-    draining = false;
-    overflowQueued = false;
-    constructor(observer, context) {
-        this.observer = observer;
-        this[OBSERVER_CONTEXT] = context;
-        this.maxQueuedItems = Math.max(4, Math.floor(context.maxQueuedItems ?? DEFAULT_MAX_QUEUED_ITEMS));
-    }
-    onConnect(path, result, reason, elapsedSeconds) {
-        const diagnostic = mapConnectDiagnostic(path, result, reason);
-        this.enqueueCombined(() => this.observer.onConnect?.(path, result, reason, elapsedSeconds), diagnostic, result === "fail");
-    }
-    onAttach(result, reason) {
-        const diagnostic = mapAttachDiagnostic(result, reason, this[OBSERVER_CONTEXT].path ?? "auto");
-        this.enqueueCombined(() => this.observer.onAttach?.(result, reason), diagnostic, result === "fail");
-    }
-    onHandshake(path, result, reason, elapsedSeconds) {
-        const diagnostic = mapHandshakeDiagnostic(path, result, reason);
-        this.enqueueCombined(() => this.observer.onHandshake?.(path, result, reason, elapsedSeconds), diagnostic, result === "fail");
-    }
-    onWsClose(kind, code) {
-        const diagnostic = mapWsCloseDiagnostic(kind, this[OBSERVER_CONTEXT].path ?? "auto");
-        this.enqueueCombined(() => this.observer.onWsClose?.(kind, code), diagnostic, false);
-    }
-    onWsError(reason) {
-        const diagnostic = mapWsErrorDiagnostic(this[OBSERVER_CONTEXT].path ?? "auto");
-        this.enqueueCombined(() => this.observer.onWsError?.(reason), diagnostic, false);
-    }
-    onRpcCall(result, elapsedSeconds) {
-        this.enqueueCombined(() => this.observer.onRpcCall?.(result, elapsedSeconds), undefined, false);
-    }
-    onRpcNotify() {
-        this.enqueueCombined(() => this.observer.onRpcNotify?.(), undefined, false);
-    }
-    onDiagnosticEvent(event) {
-        this.enqueueCombined(() => this.observer.onDiagnosticEvent?.(event), undefined, event.result === "fail");
-    }
-    emitDiagnosticEvent(event) {
-        const diagnostic = buildDiagnosticEvent(this[OBSERVER_CONTEXT], event);
-        this.enqueue({
-            kind: event.code === "diagnostics_overflow"
-                ? "overflow"
-                : event.result === "fail"
-                    ? "terminal"
-                    : "normal",
-            deliver: () => this.observer.onDiagnosticEvent?.(diagnostic),
-        });
-    }
-    enqueueCombined(callback, diagnostic, terminal) {
-        if (callback == null && diagnostic == null)
-            return;
-        const event = diagnostic == null
-            ? undefined
-            : buildDiagnosticEvent(this[OBSERVER_CONTEXT], diagnostic);
-        this.enqueue({
-            kind: terminal ? "terminal" : "normal",
-            deliver: () => {
-                safeInvoke(callback);
-                if (event != null) {
-                    safeInvoke(() => this.observer.onDiagnosticEvent?.(event));
-                }
-            },
-        });
-    }
-    enqueue(item) {
-        if (this.queue.length >= this.maxQueuedItems) {
-            if (!this.makeRoom(item.kind)) {
-                return;
-            }
-        }
-        if (item.kind === "overflow") {
-            if (this.overflowQueued)
-                return;
-            this.overflowQueued = true;
-        }
-        this.queue.push(item);
-        this.scheduleDrain();
-    }
-    makeRoom(kind) {
-        const removableIndex = this.queue.findIndex((entry) => entry.kind === "normal");
-        if (removableIndex >= 0) {
-            this.queue.splice(removableIndex, 1);
-            if (kind === "normal") {
-                this.queueOverflowEvent();
-            }
-            return true;
-        }
-        if (kind === "normal") {
-            return false;
-        }
-        if (this.queue.length > 0) {
-            const shifted = this.queue.shift();
-            if (shifted?.kind === "overflow")
-                this.overflowQueued = false;
-            return true;
-        }
-        return true;
-    }
-    queueOverflowEvent() {
-        if (this.overflowQueued || this.observer.onDiagnosticEvent == null)
-            return;
-        this.enqueue({
-            kind: "overflow",
-            deliver: () => {
-                this.overflowQueued = false;
-                safeInvoke(() => this.observer.onDiagnosticEvent?.(buildDiagnosticEvent(this[OBSERVER_CONTEXT], {
-                    stage: "reconnect",
-                    code_domain: "event",
-                    code: "diagnostics_overflow",
-                    result: "skip",
-                })));
-            },
-        });
-    }
-    scheduleDrain() {
-        if (this.draining)
-            return;
-        this.draining = true;
-        queueMicrotask(() => this.drainOne());
-    }
-    drainOne() {
-        this.draining = false;
-        const item = this.queue.shift();
-        if (item == null)
-            return;
-        if (item.kind === "overflow") {
-            this.overflowQueued = false;
-        }
-        safeInvoke(item.deliver);
-        if (this.queue.length > 0) {
-            this.scheduleDrain();
-        }
-    }
-}
-export function withObserverContext(observer, context) {
-    if (observer == null && Object.keys(context).length === 0)
-        return observer;
-    const previous = getObserverContext(observer);
-    return Object.assign({}, observer ?? {}, {
-        [OBSERVER_CONTEXT]: {
-            ...previous,
-            ...context,
-        },
-    });
-}
-export function emitObserverDiagnostic(observer, event) {
-    const normalized = normalizeObserver(observer);
-    if (normalized.emitDiagnosticEvent) {
-        normalized.emitDiagnosticEvent(event);
-        return;
-    }
-    safeInvoke(() => normalized.onDiagnosticEvent(buildDiagnosticEvent(getObserverContext(observer), event)));
-}
-export function normalizeObserver(observer, context = {}) {
-    if (observer?.[NORMALIZED_OBSERVER] === true) {
-        return observer;
-    }
-    if (!hasAnyHandlers(observer))
-        return NoopObserver;
-    return new ObserverDispatcher(observer ?? {}, {
-        attemptSeq: 1,
-        attemptStartMs: nowMilliseconds(),
-        ...getObserverContext(observer),
-        ...context,
-    });
-}
-export function nowSeconds() {
-    return nowMilliseconds() / 1000;
-}
-function nowMilliseconds() {
-    if (typeof performance !== "undefined" &&
-        typeof performance.now === "function") {
-        return performance.now();
-    }
-    return Date.now();
-}

package/dist/proxy/appWindow.d.ts

@@ -1,37 +0,0 @@
-import type { YamuxStream } from "../yamux/stream.js";
-import type { ProxyRuntimeLimits } from "./runtime.js";
-import { type ServiceWorkerControllerGuardConflictPolicy, type ServiceWorkerControllerGuardMonitorOptions, type ServiceWorkerControllerGuardRepairOptions } from "./controllerGuard.js";
-export type RegisterProxyAppWindowOptions = Readonly<{
-    controllerOrigin: string;
-    controllerWindow?: Window | null;
-    targetWindow?: Window;
-    maxWsFrameBytes?: number;
-    maxWsBufferedAmountBytes?: number;
-    capabilityNonce?: string;
-}>;
-export type ProxyAppWindowHandle = Readonly<{
-    runtime: Readonly<{
-        limits: Partial<ProxyRuntimeLimits>;
-        openWebSocketStream: (path: string, opts?: Readonly<{
-            protocols?: readonly string[];
-            signal?: AbortSignal;
-        }>) => Promise<Readonly<{
-            stream: YamuxStream;
-            protocol: string;
-        }>>;
-    }>;
-    dispose: () => void;
-}>;
-export type ProxyAppServiceWorkerControlOptions = Readonly<{
-    scriptUrl: string;
-    scope?: string;
-    expectedScriptPathSuffix: string;
-    repair?: ServiceWorkerControllerGuardRepairOptions;
-    monitor?: ServiceWorkerControllerGuardMonitorOptions;
-    conflicts?: ServiceWorkerControllerGuardConflictPolicy;
-}>;
-export type RegisterProxyAppWindowWithServiceWorkerControlOptions = RegisterProxyAppWindowOptions & Readonly<{
-    serviceWorker: ProxyAppServiceWorkerControlOptions;
-}>;
-export declare function registerProxyAppWindow(opts: RegisterProxyAppWindowOptions): ProxyAppWindowHandle;
-export declare function registerProxyAppWindowWithServiceWorkerControl(opts: RegisterProxyAppWindowWithServiceWorkerControlOptions): Promise<ProxyAppWindowHandle>;