@ikonai/sdk 1.8.0 → 1.11.0

package/sha2-DPTGfEM2.js

@@ -0,0 +1,261 @@
+//#region ../../node_modules/@noble/hashes/_u64.js
+var e = (e) => e / 2 ** 32 | 0, t = (e) => e >>> 0;
+function n(n, r, i, a) {
+	let o = e(i), s = t(i);
+	n.setUint32(r, a ? s : o, a), n.setUint32(r + 4, a ? o : s, a);
+}
+//#endregion
+//#region ../../node_modules/@noble/hashes/utils.js
+function r(e) {
+	return e instanceof Uint8Array || ArrayBuffer.isView(e) && e.constructor.name === "Uint8Array" && "BYTES_PER_ELEMENT" in e && e.BYTES_PER_ELEMENT === 1;
+}
+var i = (e) => e ? `"${e}" ` : "";
+function a(e, t = "") {
+	if (typeof e != "number") throw TypeError(i(t) + "expected number, got " + typeof e);
+	if (!Number.isSafeInteger(e) || e < 0) throw RangeError(i(t) + "expected integer >= 0, got " + e);
+	return e;
+}
+function o(e, t, n = "") {
+	if (r(e) && (t === void 0 || e.length === t)) return e;
+	t !== void 0 && a(t, "length");
+	let o = r(e), s = t === void 0 ? "" : ` of length ${t}`, c = o ? `length=${e.length}` : `type=${typeof e}`, l = i(n) + "expected Uint8Array" + s + ", got " + c;
+	throw o ? RangeError(l) : TypeError(l);
+}
+var s = (e, t) => {
+	if (typeof e != "object" || !e || Array.isArray(e)) throw TypeError((t === "object" ? "" : `"${t}" `) + "expected object, got type=" + typeof e);
+}, c = (e, t) => {
+	s(e, t);
+	let n = Object.getPrototypeOf(e);
+	if (n !== Object.prototype && n !== null) throw TypeError(`"${t}" expected plain object`);
+	if (Object.hasOwn(e, "__proto__")) throw TypeError(`"${t}.__proto__" is not allowed`);
+};
+function l(e, t = !0) {
+	if (e.destroyed) throw Error("hash was destroyed");
+	if (t && e.finished) throw Error("digest() was already called");
+}
+function u(e, t) {
+	o(e, void 0, "output");
+	let n = t.outputLen;
+	if (!(e.length >= n)) throw RangeError("\"output\" expected length >= " + n);
+}
+function d(...e) {
+	for (let t = 0; t < e.length; t++) e[t].fill(0);
+}
+function f(e) {
+	return new DataView(e.buffer, e.byteOffset, e.byteLength);
+}
+function p(e, t) {
+	return e << 32 - t | e >>> t;
+}
+function m(e, t, n = "opts") {
+	return c(e, "defaults"), t !== void 0 && c(t, n), Object.assign(Object.create(null), e, t);
+}
+function h(e, t = {}) {
+	if (typeof e != "function") throw TypeError("\"hashCons\" expected function, got type=" + typeof e);
+	t = m({}, t, "info");
+	let n = (t, n) => e(n).update(t).digest(), r = e(void 0);
+	return n.outputLen = r.outputLen, n.blockLen = r.blockLen, n.canXOF = r.canXOF, n.create = (t) => e(t), Object.assign(n, t), Object.freeze(n);
+}
+var g = (e) => ({ oid: Uint8Array.from([
+	6,
+	9,
+	96,
+	134,
+	72,
+	1,
+	101,
+	3,
+	4,
+	2,
+	e
+]) });
+//#endregion
+//#region ../../node_modules/@noble/hashes/_md.js
+function _(e, t, n) {
+	return e & t ^ ~e & n;
+}
+function v(e, t, n) {
+	return e & t ^ e & n ^ t & n;
+}
+var y = class {
+	blockLen;
+	outputLen;
+	canXOF = !1;
+	padOffset;
+	isLE;
+	buffer;
+	view;
+	finished = !1;
+	length = 0;
+	pos = 0;
+	destroyed = !1;
+	constructor(e, t, n, r) {
+		this.blockLen = e, this.outputLen = t, this.padOffset = n, this.isLE = r, this.buffer = new Uint8Array(e), this.view = f(this.buffer);
+	}
+	update(e) {
+		l(this), o(e);
+		let { view: t, buffer: n, blockLen: r } = this, i = e.length, a = !1;
+		for (let o = 0; o < i;) {
+			let s = Math.min(r - this.pos, i - o);
+			if (s === r) {
+				let t = f(e);
+				for (; r <= i - o; o += r) this.process(t, o);
+				a = !0;
+				continue;
+			}
+			n.set(o === 0 && s === i ? e : e.subarray(o, o + s), this.pos), this.pos += s, o += s, this.pos === r && (this.process(t, 0), this.pos = 0, a = !0);
+		}
+		return this.length += e.length, a && this.roundClean(), this;
+	}
+	digestInto(e) {
+		l(this), u(e, this), this.finished = !0;
+		let { buffer: t, view: r, blockLen: i, isLE: a } = this, { pos: o } = this;
+		t[o++] = 128, t.fill(0, o), this.padOffset > i - o && (this.process(r, 0), t.fill(0)), n(r, i - 8, this.length * 8, a), this.process(r, 0), this.roundClean();
+		let s = e === t ? r : f(e), c = this.outputLen, d = c / 4, p = this.get();
+		if (c % 4 || d > p.length) throw Error("invalid outputLen");
+		for (let e = 0; e < d; e++) s.setUint32(4 * e, p[e], a);
+	}
+	digest() {
+		let { buffer: e, outputLen: t } = this;
+		this.digestInto(e);
+		let n = e.slice(0, t);
+		return this.destroy(), n;
+	}
+	_cloneIntoMeta(e) {
+		let { buffer: t, length: n, finished: r, destroyed: i, pos: a } = this;
+		return e.destroyed = i, e.finished = r, e.length = n, e.pos = a, a && e.buffer.set(t), e;
+	}
+	clone() {
+		return this._cloneInto();
+	}
+}, b = /* @__PURE__ */ Uint32Array.from([
+	1779033703,
+	3144134277,
+	1013904242,
+	2773480762,
+	1359893119,
+	2600822924,
+	528734635,
+	1541459225
+]), x = /* @__PURE__ */ Uint32Array.from([
+	1116352408,
+	1899447441,
+	3049323471,
+	3921009573,
+	961987163,
+	1508970993,
+	2453635748,
+	2870763221,
+	3624381080,
+	310598401,
+	607225278,
+	1426881987,
+	1925078388,
+	2162078206,
+	2614888103,
+	3248222580,
+	3835390401,
+	4022224774,
+	264347078,
+	604807628,
+	770255983,
+	1249150122,
+	1555081692,
+	1996064986,
+	2554220882,
+	2821834349,
+	2952996808,
+	3210313671,
+	3336571891,
+	3584528711,
+	113926993,
+	338241895,
+	666307205,
+	773529912,
+	1294757372,
+	1396182291,
+	1695183700,
+	1986661051,
+	2177026350,
+	2456956037,
+	2730485921,
+	2820302411,
+	3259730800,
+	3345764771,
+	3516065817,
+	3600352804,
+	4094571909,
+	275423344,
+	430227734,
+	506948616,
+	659060556,
+	883997877,
+	958139571,
+	1322822218,
+	1537002063,
+	1747873779,
+	1955562222,
+	2024104815,
+	2227730452,
+	2361852424,
+	2428436474,
+	2756734187,
+	3204031479,
+	3329325298
+]), S = /* @__PURE__ */ new Uint32Array(64), C = class extends y {
+	A = 0;
+	B = 0;
+	C = 0;
+	D = 0;
+	E = 0;
+	F = 0;
+	G = 0;
+	H = 0;
+	constructor(e, t) {
+		super(64, e, 8, !1), this.A = t[0] | 0, this.B = t[1] | 0, this.C = t[2] | 0, this.D = t[3] | 0, this.E = t[4] | 0, this.F = t[5] | 0, this.G = t[6] | 0, this.H = t[7] | 0;
+	}
+	get() {
+		let { A: e, B: t, C: n, D: r, E: i, F: a, G: o, H: s } = this;
+		return [
+			e,
+			t,
+			n,
+			r,
+			i,
+			a,
+			o,
+			s
+		];
+	}
+	set(e, t, n, r, i, a, o, s) {
+		this.A = e | 0, this.B = t | 0, this.C = n | 0, this.D = r | 0, this.E = i | 0, this.F = a | 0, this.G = o | 0, this.H = s | 0;
+	}
+	_cloneInto(e) {
+		return (e ||= new this.constructor()).set(...this.get()), this._cloneIntoMeta(e);
+	}
+	process(e, t) {
+		for (let n = 0; n < 16; n++, t += 4) S[n] = e.getUint32(t, !1);
+		for (let e = 16; e < 64; e++) {
+			let t = S[e - 15], n = S[e - 2], r = p(t, 7) ^ p(t, 18) ^ t >>> 3, i = p(n, 17) ^ p(n, 19) ^ n >>> 10;
+			S[e] = i + S[e - 7] + r + S[e - 16] | 0;
+		}
+		let { A: n, B: r, C: i, D: a, E: o, F: s, G: c, H: l } = this;
+		for (let e = 0; e < 64; e++) {
+			let t = p(o, 6) ^ p(o, 11) ^ p(o, 25), u = l + t + _(o, s, c) + x[e] + S[e] | 0, d = (p(n, 2) ^ p(n, 13) ^ p(n, 22)) + v(n, r, i) | 0;
+			l = c, c = s, s = o, o = a + u | 0, a = i, i = r, r = n, n = u + d | 0;
+		}
+		n = n + this.A | 0, r = r + this.B | 0, i = i + this.C | 0, a = a + this.D | 0, o = o + this.E | 0, s = s + this.F | 0, c = c + this.G | 0, l = l + this.H | 0, this.set(n, r, i, a, o, s, c, l);
+	}
+	roundClean() {
+		d(S);
+	}
+	destroy() {
+		this.destroyed = !0, this.set(0, 0, 0, 0, 0, 0, 0, 0), d(this.buffer);
+	}
+}, w = class extends C {
+	constructor() {
+		super(32, b);
+	}
+}, T = /* @__PURE__ */ h(() => new w(), /* @__PURE__ */ g(1));
+//#endregion
+export { T as sha256 };

package/storage.d.ts

@@ -4,7 +4,7 @@
 /**
  * Get or create a persistent device ID.
  * Uses randomUuid() and stores in localStorage for persistence across sessions.
- * Falls back to generating a new UUID if localStorage is unavailable.
+ * Falls back to a page-lifetime id when localStorage is unavailable.
  */
 export declare function getOrCreateDeviceId(): string;
 /**
@@ -31,3 +31,4 @@ export interface AuthTokenClaims {
  * `role`). Returns null if the token cannot be decoded.
  */
 export declare function extractAuthClaimsFromToken(token: string): AuthTokenClaims | null;
+//# sourceMappingURL=storage.d.ts.map

package/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../sdk/sdk/src/storage.ts"],"names":[],"mappings":"AAAA;;GAEG;AAkBH;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAkB5C;AAED;;;GAGG;AACH,wBAAgB,aAAa,IAAI,IAAI,CAQpC;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGnE;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAShF"}

package/transport/http-stream-transport.d.ts

@@ -1,4 +1,4 @@
-import { ProtocolMessage } from '../../shared/protocol/src/index.ts';
+import { ProtocolMessage } from '@ikonai/protocol';
 import { HttpStreamMode, Transport, TransportConfig } from './transport';
 /**
  * Carries the protocol over ordinary HTTP requests, for networks that permit HTTPS to the app's
@@ -102,6 +102,22 @@ export declare class HttpStreamTransport implements Transport {
     private handleProtocolMessage;
     private handleClose;
     private abortDownstream;
+    checkKeepaliveNow(): void;
+    checkKeepaliveWithin(maxSilenceMs: number): void;
     private resetKeepaliveTimeout;
     private clearKeepaliveTimeout;
 }
+/**
+ * Reassembles the protocol byte stream out of SSE `data:` lines.
+ *
+ * Deliberately not a full SSE parser: the server emits one shape — an optional comment preamble and
+ * `data: <base64>` records — and event names, ids and retry fields never appear.
+ */
+export declare class SseDecoder {
+    private static readonly MaxLineLength;
+    private readonly decoder;
+    private pending;
+    push(chunk: Uint8Array, onMessage: (message: Uint8Array) => void): void;
+    private assertWithinLineBound;
+}
+//# sourceMappingURL=http-stream-transport.d.ts.map

package/transport/http-stream-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-stream-transport.d.ts","sourceRoot":"","sources":["../../../../sdk/sdk/src/transport/http-stream-transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuF,KAAK,eAAe,EAA8B,MAAM,kBAAkB,CAAC;AAKzK,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AA8B9E;;;;;;;;;;GAUG;AACH,qBAAa,mBAAoB,YAAW,SAAS;IACnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+B;IACzD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IACxD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6B;IAE3D,OAAO,CAAC,OAAO,CAAM;IACrB,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,IAAI,CAA4B;IACxC,OAAO,CAAC,eAAe,CAAgC;IACvD,OAAO,CAAC,SAAS,CAAkC;IACnD,OAAO,CAAC,wBAAwB,CAAgC;IAChE,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,UAAU,CAAS;IAE3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoB;IAC9C,OAAO,CAAC,eAAe,CAAS;IAGhC,OAAO,CAAC,oBAAoB,CAA6B;gBAE7C,MAAM,EAAE,eAAe;IASnC,IAAI,WAAW,IAAI,OAAO,CAEzB;IAED,6FAA6F;IAC7F,IAAI,UAAU,IAAI,cAAc,CAE/B;IAEK,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAiDjE,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IAUpC,KAAK,IAAI,IAAI;IAQb;;;;;;;;OAQG;YACW,QAAQ;IAetB;;;;;;;;;;OAUG;YACW,WAAW;IA+BzB;;;;;;OAMG;YACW,cAAc;IA4C5B;;;;;OAKG;YACW,iBAAiB;YA2CjB,YAAY;IAwB1B;;;;;;OAMG;YACW,WAAW;IA4CzB;;;;;OAKG;IACH,OAAO,CAAC,SAAS;IA4BjB,OAAO,CAAC,SAAS;IAIjB;;;OAGG;IACH,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,oBAAoB;IAQ5B,OAAO,CAAC,qBAAqB;IA2B7B,OAAO,CAAC,WAAW;IAenB,OAAO,CAAC,eAAe;IAOvB,iBAAiB,IAAI,IAAI;IAIzB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAIhD,OAAO,CAAC,qBAAqB;IAQ7B,OAAO,CAAC,qBAAqB;CAG9B;AAiBD;;;;;GAKG;AACH,qBAAa,UAAU;IAErB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAA0C;IAE/E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,OAAO,CAAM;IAErB,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,IAAI,GAAG,IAAI;IAsBvE,OAAO,CAAC,qBAAqB;CAM9B"}

package/transport/keepalive-watchdog.d.ts

@@ -3,13 +3,45 @@ import { KeepaliveTimeoutError } from '../errors';
  * The transport-side dead-link detector, one implementation for every transport: the server
  * promises a keepalive cadence at connect, and a silence longer than the promised watchdog closes
  * the transport so the reconnect ladder can take over.
+ *
+ * The timer alone is not enough in a browser: a suspended tab's timers do not fire on schedule, so
+ * a link that died while the tab slept keeps looking alive after it wakes. The watchdog therefore
+ * also remembers the wall-clock time of the last keepalive; {@link checkNow} compares against it
+ * on wake, closing the transport immediately when the cadence was missed during the suspension.
+ *
+ * The promised cadence is sized for the worst case the server allows itself, so it is far too
+ * patient for a link something else already gives reason to doubt — a browser reporting the
+ * interface gone. {@link checkWithin} is that case: the caller names a shorter budget, and the
+ * link is asked to prove itself with traffic inside it.
  */
 export declare class KeepaliveWatchdog {
     private readonly timeoutMs;
     private readonly what;
     private readonly onTimeout;
     private timeout;
+    private lastResetAt;
     constructor(timeoutMs: number, what: string, onTimeout: (error: KeepaliveTimeoutError) => void);
     reset(): void;
+    /**
+     * Wall-clock verification of the promised cadence, for the moments scheduled timers cannot
+     * serve (a tab resuming from suspension). Fires the timeout handler when the cadence was
+     * missed; a no-op while the watchdog is disarmed or disabled.
+     */
+    checkNow(): void;
+    /**
+     * Hold the link to a shorter budget than the promised cadence, for when something outside the
+     * transport gives reason to doubt it but cannot prove anything — a browser reporting the network
+     * gone, which is a hint and not evidence, and which some devices get plainly wrong.
+     *
+     * Traffic is what answers: any inbound message calls {@link reset}, which clears this deadline
+     * and restores the negotiated budget, so a link that is merely slandered survives being asked.
+     * Silence past the budget closes the transport through the same path a dead link always takes.
+     *
+     * @param maxSilenceMs - The tightened budget. Never lengthens the standing deadline; a budget
+     *   longer than the promised cadence is capped to it.
+     */
+    checkWithin(maxSilenceMs: number): void;
     clear(): void;
+    private fire;
 }
+//# sourceMappingURL=keepalive-watchdog.d.ts.map

package/transport/keepalive-watchdog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keepalive-watchdog.d.ts","sourceRoot":"","sources":["../../../../sdk/sdk/src/transport/keepalive-watchdog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAKlD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,iBAAiB;IAK1B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAN5B,OAAO,CAAC,OAAO,CAA8C;IAC7D,OAAO,CAAC,WAAW,CAAK;gBAGL,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI;IAGpE,KAAK,IAAI,IAAI;IAsBb;;;;OAIG;IACH,QAAQ,IAAI,IAAI;IAahB;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAuBvC,KAAK,IAAI,IAAI;IAOb,OAAO,CAAC,IAAI;CAIb"}

package/transport/message-framer.d.ts

@@ -34,3 +34,4 @@ export declare class MessageFramer {
     private append;
     private getDataView;
 }
+//# sourceMappingURL=message-framer.d.ts.map

package/transport/message-framer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-framer.d.ts","sourceRoot":"","sources":["../../../../sdk/sdk/src/transport/message-framer.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;GAUG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAuD;IACrE,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,YAAY,CAAK;IAEzB,OAAO,CAAC,QAAQ,CAAyB;IACzC,OAAO,CAAC,cAAc,CAAgC;IAEtD;;;;;;;;OAQG;IACH,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,IAAI,GAAG,IAAI;IAgCtE,qFAAqF;IACrF,KAAK,IAAI,IAAI;IAKb;;;OAGG;IACH,OAAO,CAAC,MAAM;IAsBd,OAAO,CAAC,WAAW;CAUpB"}

package/transport/transport-probe.d.ts

@@ -1,4 +1,4 @@
-import { EntrypointType } from '../../shared/protocol/src/index.ts';
+import { EntrypointType } from '@ikonai/protocol';
 /**
  * Can this client still reach an entrypoint over the given transport?
  *
@@ -17,3 +17,4 @@ export declare function probeEntrypointReachable(type: EntrypointType, uri: stri
     timeoutMs?: number;
     signal?: AbortSignal;
 }): Promise<boolean>;
+//# sourceMappingURL=transport-probe.d.ts.map

package/transport/transport-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-probe.d.ts","sourceRoot":"","sources":["../../../../sdk/sdk/src/transport/transport-probe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAQlD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,GACrD,OAAO,CAAC,OAAO,CAAC,CAwBlB"}

package/transport/transport.d.ts

@@ -1,4 +1,4 @@
-import { ProtocolMessage } from '../../shared/protocol/src/index.ts';
+import { ProtocolMessage } from '@ikonai/protocol';
 /**
  * The HTTP stream transport's downstream encodings, most efficient first.
  *
@@ -30,6 +30,20 @@ export interface Transport {
      * Check if the transport is currently connected.
      */
     readonly isConnected: boolean;
+    /**
+     * Verify the promised keepalive cadence by wall clock and close the transport when it was
+     * missed. Timers do not fire while a page is suspended, so a link that died during the
+     * suspension still schedules as healthy; this is the wake-time complement to the scheduled
+     * keepalive watchdog, called from the channel health check when the page becomes visible again.
+     */
+    checkKeepaliveNow?(): void;
+    /**
+     * Hold the link to a shorter budget than the promised cadence and close the transport when no
+     * message arrives inside it. For a suspicion raised outside the transport — a browser reporting
+     * the interface gone — which the promised cadence is far too patient to settle. Inbound traffic
+     * cancels the tightened deadline, so asking cannot disturb a live link.
+     */
+    checkKeepaliveWithin?(maxSilenceMs: number): void;
 }
 /**
  * Callbacks for transport events.
@@ -86,3 +100,4 @@ export interface TransportConfig {
      */
     httpStreamPreferredMode?: HttpStreamMode;
 }
+//# sourceMappingURL=transport.d.ts.map

package/transport/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../../sdk/sdk/src/transport/transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAEvD;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB;;;;OAIG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5D;;OAEG;IACH,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;IAErC;;OAEG;IACH,KAAK,IAAI,IAAI,CAAC;IAEd;;OAEG;IACH,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAE9B;;;;;OAKG;IACH,iBAAiB,CAAC,IAAI,IAAI,CAAC;IAE3B;;;;;OAKG;IACH,oBAAoB,CAAC,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,iBAAiB,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,IAAI,CAAC;IAEjD;;;;OAIG;IACH,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAEvD;;OAEG;IACH,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,SAAS,EAAE,kBAAkB,CAAC;IAE9B;;;OAGG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAE3B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;OAIG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAEhC;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,cAAc,CAAC;CAC1C"}

package/transport/web-socket-transport.d.ts

@@ -1,4 +1,4 @@
-import { ProtocolMessage } from '../../shared/protocol/src/index.ts';
+import { ProtocolMessage } from '@ikonai/protocol';
 import { Transport, TransportConfig } from './transport';
 /**
  * WebSocket transport implementation for Ikon server connections.
@@ -23,6 +23,9 @@ export declare class WebSocketTransport implements Transport {
      */
     private getKeepaliveResponse;
     private handleProtocolMessage;
+    checkKeepaliveNow(): void;
+    checkKeepaliveWithin(maxSilenceMs: number): void;
     private resetKeepaliveTimeout;
     private clearKeepaliveTimeout;
 }
+//# sourceMappingURL=web-socket-transport.d.ts.map

package/transport/web-socket-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-socket-transport.d.ts","sourceRoot":"","sources":["../../../../sdk/sdk/src/transport/web-socket-transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuE,KAAK,eAAe,EAA8B,MAAM,kBAAkB,CAAC;AAIzJ,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAM9D;;GAEG;AACH,qBAAa,kBAAmB,YAAW,SAAS;IAClD,OAAO,CAAC,EAAE,CAA0B;IACpC,OAAO,CAAC,SAAS,CAAkC;IACnD,OAAO,CAAC,QAAQ,CAAS;IAEzB,OAAO,CAAC,wBAAwB,CAAgC;IAGhE,OAAO,CAAC,oBAAoB,CAA6B;IACzD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+B;IACzD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,MAAM,EAAE,eAAe;IAOnC,IAAI,WAAW,IAAI,OAAO,CAEzB;IAEK,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAoHjE,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IAQpC,KAAK,IAAI,IAAI;IASb;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,qBAAqB;IA6B7B,iBAAiB,IAAI,IAAI;IAIzB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAIhD,OAAO,CAAC,qBAAqB;IAQ7B,OAAO,CAAC,qBAAqB;CAG9B"}

package/transport/web-transport-support.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Check if WebTransport is supported in the current environment.
+ */
+export declare function isWebTransportSupported(): boolean;
+//# sourceMappingURL=web-transport-support.d.ts.map

package/transport/web-transport-support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-transport-support.d.ts","sourceRoot":"","sources":["../../../../sdk/sdk/src/transport/web-transport-support.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,OAAO,CAEjD"}

package/transport/web-transport-transport.d.ts

@@ -1,9 +1,5 @@
-import { ProtocolMessage } from '../../shared/protocol/src/index.ts';
+import { ProtocolMessage } from '@ikonai/protocol';
 import { Transport, TransportConfig } from './transport';
-/**
- * Check if WebTransport is supported in the current environment.
- */
-export declare function isWebTransportSupported(): boolean;
 /**
  * WebTransport transport implementation for Ikon server connections.
  *
@@ -51,9 +47,8 @@ export declare class WebTransportTransport implements Transport {
      * Handle connection close.
      */
     private handleClose;
-    /**
-     * Reset the keepalive timeout.
-     */
+    checkKeepaliveNow(): void;
+    checkKeepaliveWithin(maxSilenceMs: number): void;
     private resetKeepaliveTimeout;
     private clearKeepaliveTimeout;
     /**
@@ -61,3 +56,4 @@ export declare class WebTransportTransport implements Transport {
      */
     private cleanup;
 }
+//# sourceMappingURL=web-transport-transport.d.ts.map

package/transport/web-transport-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-transport-transport.d.ts","sourceRoot":"","sources":["../../../../sdk/sdk/src/transport/web-transport-transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuE,KAAK,eAAe,EAA8B,MAAM,kBAAkB,CAAC;AAMzJ,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAM9D;;;;;;;;;GASG;AACH,qBAAa,qBAAsB,YAAW,SAAS;IACrD,OAAO,CAAC,SAAS,CAA6B;IAC9C,OAAO,CAAC,MAAM,CAAgD;IAC9D,OAAO,CAAC,MAAM,CAAwD;IACtE,OAAO,CAAC,MAAM,CAAwD;IACtE,OAAO,CAAC,SAAS,CAAkC;IACnD,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAS;IAIzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAG9C,OAAO,CAAC,wBAAwB,CAAgC;IAIhE,OAAO,CAAC,oBAAoB,CAA6B;IACzD,OAAO,CAAC,oBAAoB,CAAyC;IAErE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+B;IACzD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,MAAM,EAAE,eAAe;IAOnC,IAAI,WAAW,IAAI,OAAO,CAEzB;IAEK,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAqGjE,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IAcpC,KAAK,IAAI,IAAI;IAOb;;OAEG;YACW,aAAa;IAoC3B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAO5B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA6B7B;;OAEG;IACH,OAAO,CAAC,WAAW;IA0BnB,iBAAiB,IAAI,IAAI;IAIzB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAIhD,OAAO,CAAC,qBAAqB;IAQ7B,OAAO,CAAC,qBAAqB;IAI7B;;OAEG;IACH,OAAO,CAAC,OAAO;CAwBhB"}

package/upload/file-upload.d.ts

@@ -0,0 +1,62 @@
+import { ActionFileUploadComplete2 } from '@ikonai/protocol';
+import { IkonClient } from '../client/ikon-client';
+/** One file to send through an app's upload action. */
+export interface FileUploadRequest {
+    file: Blob & {
+        readonly name: string;
+    };
+    /** Chosen by the sender; the app sees it on every upload event, and a capture returns it. */
+    uploadId: string;
+    /** The upload action the app registered (a `FileUploadZone`'s, or one handed to a client function). */
+    uploadActionId: string;
+}
+/**
+ * An upload that did not finish. `retriable` separates the failures where sending the same bytes
+ * again is likely to work — a stall, a dropped connection — from a verdict the server will simply
+ * repeat, so a caller can decide whether offering a retry is honest.
+ */
+export declare class UploadFailedError extends Error {
+    readonly retriable: boolean;
+    constructor(message: string, retriable: boolean);
+}
+/**
+ * The failure a Complete2 carries, or null when it reports success. A server that predates the
+ * verdict sends neither field, and its Complete2 always meant success — so only an explicit `false`
+ * is a failure. The verdict is the server's final word on these bytes, so it is not retriable.
+ */
+export declare function uploadFailureFromComplete(complete: ActionFileUploadComplete2): UploadFailedError | null;
+export declare function uploadFile(client: IkonClient, request: FileUploadRequest): Promise<void>;
+/**
+ * Follows the ACK stream for one upload through a single subscription. The sender keeps several
+ * chunks outstanding at once, so more than one sequence can be waited on at a time, and a listener
+ * per chunk would mean a subscribe/unsubscribe cycle per megabyte.
+ */
+export declare class UploadAckTracker {
+    private readonly uploadId;
+    private readonly signal;
+    private readonly waiters;
+    private readonly unsubscribe;
+    private readonly onAbort;
+    private idleTimer;
+    private highestAcked;
+    private failure;
+    private disposed;
+    constructor(client: IkonClient, uploadId: string, signal: AbortSignal);
+    /** Resolves once the server has acknowledged this sequence. */
+    waitFor(sequenceId: number): Promise<void>;
+    /**
+     * Releases everything waiting on an acknowledgement that can no longer arrive, so the sender can
+     * go and re-establish where the server got to instead of sitting out the idle timeout.
+     */
+    disconnected(): void;
+    /** Re-points the tracker at the server's resume position after a reconnect. */
+    rewindTo(lastAckedSequenceId: number): void;
+    dispose(): void;
+    private onAck;
+    private resetIdleTimer;
+    private clearIdleTimer;
+    private fail;
+    /** An abort is the server's Complete2 arriving; the sender stops on its own signal check. */
+    private settleAll;
+}
+//# sourceMappingURL=file-upload.d.ts.map

package/upload/file-upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-upload.d.ts","sourceRoot":"","sources":["../../../../sdk/sdk/src/upload/file-upload.ts"],"names":[],"mappings":"AAAA,OAAO,EAsBL,KAAK,yBAAyB,EAG/B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGxD,uDAAuD;AACvD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,IAAI,GAAG;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,6FAA6F;IAC7F,QAAQ,EAAE,MAAM,CAAC;IACjB,uGAAuG;IACvG,cAAc,EAAE,MAAM,CAAC;CACxB;AA2BD;;;;GAIG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAEhB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO;CAKhD;AAaD;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,yBAAyB,GAAG,iBAAiB,GAAG,IAAI,CAMvG;AA0BD,wBAAsB,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoM9F;AAkOD;;;;GAIG;AACH,qBAAa,gBAAgB;IAWzB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAXzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8E;IACtG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAa;IACrC,OAAO,CAAC,SAAS,CAA8C;IAC/D,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,OAAO,CAAsB;IACrC,OAAO,CAAC,QAAQ,CAAS;gBAGvB,MAAM,EAAE,UAAU,EACD,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,WAAW;IA8BtC,+DAA+D;IAC/D,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAc1C;;;OAGG;IACH,YAAY,IAAI,IAAI;IAUpB,+EAA+E;IAC/E,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI;IAM3C,OAAO,IAAI,IAAI;IAWf,OAAO,CAAC,KAAK;IAgBb,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,IAAI;IAWZ,6FAA6F;IAC7F,OAAO,CAAC,SAAS;CASlB"}

package/utils/abort-signal.d.ts

@@ -18,3 +18,4 @@ export declare function abortSignalTimeout(ms: number): AbortSignal;
  * Returns an `AbortSignal` that aborts as soon as any of `signals` aborts.
  */
 export declare function abortSignalAny(signals: AbortSignal[]): AbortSignal;
+//# sourceMappingURL=abort-signal.d.ts.map

package/utils/abort-signal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"abort-signal.d.ts","sourceRoot":"","sources":["../../../../sdk/sdk/src/utils/abort-signal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAkBH;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,CAU1D;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,WAAW,CAuBlE"}

package/utils/app-routes.d.ts

@@ -15,3 +15,4 @@ export declare const RESERVED_PATH_PREFIXES: readonly ["/ikon", "/api"];
  * `/ikonic` and other paths that merely share a leading substring are NOT reserved.
  */
 export declare function isReservedPath(path: string): boolean;
+//# sourceMappingURL=app-routes.d.ts.map

package/utils/app-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-routes.d.ts","sourceRoot":"","sources":["../../../../sdk/sdk/src/utils/app-routes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,4BAA6B,CAAC;AAEjE;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CASpD"}

package/utils/boot-signal.d.ts

@@ -12,3 +12,4 @@
  * browser fallbacks are.
  */
 export declare function signalBundleRunning(): void;
+//# sourceMappingURL=boot-signal.d.ts.map

package/utils/boot-signal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot-signal.d.ts","sourceRoot":"","sources":["../../../../sdk/sdk/src/utils/boot-signal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,wBAAgB,mBAAmB,IAAI,IAAI,CAW1C"}

package/utils/browser-compat.d.ts

@@ -15,3 +15,4 @@
  * Apply every fallback the current browser needs. Idempotent, and a no-op on a current browser.
  */
 export declare function applyBrowserCompat(): void;
+//# sourceMappingURL=browser-compat.d.ts.map

package/utils/browser-compat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-compat.d.ts","sourceRoot":"","sources":["../../../../sdk/sdk/src/utils/browser-compat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAkCH;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CA0FzC"}

package/utils/browser-support.d.ts

@@ -29,3 +29,4 @@ export interface BrowserSupportResult {
  * Check whether the current runtime has every feature the SDK requires.
  */
 export declare function checkBrowserSupport(): BrowserSupportResult;
+//# sourceMappingURL=browser-support.d.ts.map

package/utils/browser-support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-support.d.ts","sourceRoot":"","sources":["../../../../sdk/sdk/src/utils/browser-support.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAaH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;CACpC;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,oBAAoB,CAkB1D"}

package/utils/client-identity.d.ts

@@ -0,0 +1,14 @@
+/** This build's version, or `dev` when the bundler did not stamp one in. */
+export declare const SDK_VERSION: string;
+/**
+ * Names the SDK and its version on every request it makes.
+ *
+ * Not `User-Agent`: browsers refuse to let `fetch` set that one, so from the backend's side every
+ * request the web SDK makes is indistinguishable from any other page on the same browser. Diagnosing
+ * a misbehaving client meant guessing from the route it called.
+ */
+export declare const IKON_CLIENT_HEADER = "X-Ikon-Client";
+export declare const IKON_CLIENT_HEADER_VALUE: string;
+/** Spread into a fetch's headers; one place so a new request cannot forget to identify itself. */
+export declare function ikonClientHeaders(): Record<string, string>;
+//# sourceMappingURL=client-identity.d.ts.map

package/utils/client-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-identity.d.ts","sourceRoot":"","sources":["../../../../sdk/sdk/src/utils/client-identity.ts"],"names":[],"mappings":"AAKA,4EAA4E;AAC5E,eAAO,MAAM,WAAW,EAAE,MAAgF,CAAC;AAE3G;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAElD,eAAO,MAAM,wBAAwB,QAAuC,CAAC;AAE7E,kGAAkG;AAClG,wBAAgB,iBAAiB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE1D"}

package/utils/connect-timeline.d.ts

@@ -2,3 +2,4 @@ export declare function getConnectTraceId(): string;
 export declare function reportConnectTimeline(opts?: {
     snapshotSeeded?: boolean;
 }): void;
+//# sourceMappingURL=connect-timeline.d.ts.map

package/utils/connect-timeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-timeline.d.ts","sourceRoot":"","sources":["../../../../sdk/sdk/src/utils/connect-timeline.ts"],"names":[],"mappings":"AAoBA,wBAAgB,iBAAiB,IAAI,MAAM,CAa1C;AAgFD,wBAAgB,qBAAqB,CAAC,IAAI,GAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,IAAI,CAgDnF"}

package/utils/debug-mode.d.ts

@@ -14,3 +14,4 @@ export declare function isDebugModeEnabled(): boolean;
  * Also updates the URL to contain ikon-debug=true query param.
  */
 export declare function enableDebugMode(): void;
+//# sourceMappingURL=debug-mode.d.ts.map

package/utils/debug-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"debug-mode.d.ts","sourceRoot":"","sources":["../../../../sdk/sdk/src/utils/debug-mode.ts"],"names":[],"mappings":"AAOA;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAa7C;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,OAAO,CAE5C;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAStC"}