@makaio/framework 1.0.0-dev-1788721567504 → 1.0.0-dev-1788811230746

package/dist/{namespace-Bo94cenp.d.mts → namespace-Cs-cOyrn.d.mts}

@@ -38,25 +38,6 @@ declare const AgentRuntimeNamespace: _$_makaio_core0.BusNamespaceDefinition<"age
         env: _$zod.ZodOptional<_$zod.ZodRecord<_$zod.ZodString, _$zod.ZodString>>;
         mcpSessionContext: _$zod.ZodOptional<_$zod.ZodObject<{
           sessionId: _$zod.ZodString;
-          directTools: _$zod.ZodArray<_$zod.ZodObject<{
-            fullName: _$zod.ZodString;
-            originalName: _$zod.ZodString;
-            serverName: _$zod.ZodString;
-            description: _$zod.ZodOptional<_$zod.ZodString>;
-            inputSchema: _$zod.ZodRecord<_$zod.ZodString, _$zod.ZodUnknown>;
-            exposureMode: _$zod.ZodEnum<{
-              direct: "direct";
-              discovery: "discovery";
-              hidden: "hidden";
-            }>;
-            enabled: _$zod.ZodBoolean;
-            enabledBy: _$zod.ZodOptional<_$zod.ZodEnum<{
-              discovery: "discovery";
-              toolset: "toolset";
-            }>>;
-            enabledAt: _$zod.ZodOptional<_$zod.ZodNumber>;
-            exposed: _$zod.ZodBoolean;
-          }, _$zod_v4_core0.$strip>>;
           servers: _$zod.ZodArray<_$zod.ZodObject<{
             name: _$zod.ZodString;
             transport: _$zod.ZodDiscriminatedUnion<[_$zod.ZodObject<{
@@ -97,6 +78,25 @@ declare const AgentRuntimeNamespace: _$_makaio_core0.BusNamespaceDefinition<"age
               discovery: "discovery";
             }>;
           }, _$zod_v4_core0.$strip>>;
+          directTools: _$zod.ZodArray<_$zod.ZodObject<{
+            fullName: _$zod.ZodString;
+            originalName: _$zod.ZodString;
+            serverName: _$zod.ZodString;
+            description: _$zod.ZodOptional<_$zod.ZodString>;
+            inputSchema: _$zod.ZodRecord<_$zod.ZodString, _$zod.ZodUnknown>;
+            exposureMode: _$zod.ZodEnum<{
+              direct: "direct";
+              discovery: "discovery";
+              hidden: "hidden";
+            }>;
+            enabled: _$zod.ZodBoolean;
+            enabledBy: _$zod.ZodOptional<_$zod.ZodEnum<{
+              discovery: "discovery";
+              toolset: "toolset";
+            }>>;
+            enabledAt: _$zod.ZodOptional<_$zod.ZodNumber>;
+            exposed: _$zod.ZodBoolean;
+          }, _$zod_v4_core0.$strip>>;
           discoverableTools: _$zod.ZodArray<_$zod.ZodObject<{
             fullName: _$zod.ZodString;
             originalName: _$zod.ZodString;
@@ -135,18 +135,6 @@ declare const AgentRuntimeNamespace: _$_makaio_core0.BusNamespaceDefinition<"age
         env?: Record<string, string> | undefined;
         mcpSessionContext?: {
           sessionId: string;
-          directTools: {
-            fullName: string;
-            originalName: string;
-            serverName: string;
-            inputSchema: Record<string, unknown>;
-            exposureMode: "direct" | "discovery" | "hidden";
-            enabled: boolean;
-            exposed: boolean;
-            description?: string | undefined;
-            enabledBy?: "discovery" | "toolset" | undefined;
-            enabledAt?: number | undefined;
-          }[];
           servers: {
             name: string;
             transport: {
@@ -176,6 +164,18 @@ declare const AgentRuntimeNamespace: _$_makaio_core0.BusNamespaceDefinition<"age
             };
             exposureMode: "direct" | "discovery";
           }[];
+          directTools: {
+            fullName: string;
+            originalName: string;
+            serverName: string;
+            inputSchema: Record<string, unknown>;
+            exposureMode: "direct" | "discovery" | "hidden";
+            enabled: boolean;
+            exposed: boolean;
+            description?: string | undefined;
+            enabledBy?: "discovery" | "toolset" | undefined;
+            enabledAt?: number | undefined;
+          }[];
           discoverableTools: {
             fullName: string;
             originalName: string;
@@ -210,18 +210,6 @@ declare const AgentRuntimeNamespace: _$_makaio_core0.BusNamespaceDefinition<"age
         env?: Record<string, string> | undefined;
         mcpSessionContext?: {
           sessionId: string;
-          directTools: {
-            fullName: string;
-            originalName: string;
-            serverName: string;
-            inputSchema: Record<string, unknown>;
-            exposureMode: "direct" | "discovery" | "hidden";
-            enabled: boolean;
-            exposed: boolean;
-            description?: string | undefined;
-            enabledBy?: "discovery" | "toolset" | undefined;
-            enabledAt?: number | undefined;
-          }[];
           servers: {
             name: string;
             transport: {
@@ -251,6 +239,18 @@ declare const AgentRuntimeNamespace: _$_makaio_core0.BusNamespaceDefinition<"age
             };
             exposureMode: "direct" | "discovery";
           }[];
+          directTools: {
+            fullName: string;
+            originalName: string;
+            serverName: string;
+            inputSchema: Record<string, unknown>;
+            exposureMode: "direct" | "discovery" | "hidden";
+            enabled: boolean;
+            exposed: boolean;
+            description?: string | undefined;
+            enabledBy?: "discovery" | "toolset" | undefined;
+            enabledAt?: number | undefined;
+          }[];
           discoverableTools: {
             fullName: string;
             originalName: string;
@@ -282,18 +282,6 @@ declare const AgentRuntimeNamespace: _$_makaio_core0.BusNamespaceDefinition<"age
         env?: Record<string, string> | undefined;
         mcpSessionContext?: {
           sessionId: string;
-          directTools: {
-            fullName: string;
-            originalName: string;
-            serverName: string;
-            inputSchema: Record<string, unknown>;
-            exposureMode: "direct" | "discovery" | "hidden";
-            enabled: boolean;
-            exposed: boolean;
-            description?: string | undefined;
-            enabledBy?: "discovery" | "toolset" | undefined;
-            enabledAt?: number | undefined;
-          }[];
           servers: {
             name: string;
             transport: {
@@ -323,6 +311,18 @@ declare const AgentRuntimeNamespace: _$_makaio_core0.BusNamespaceDefinition<"age
             };
             exposureMode: "direct" | "discovery";
           }[];
+          directTools: {
+            fullName: string;
+            originalName: string;
+            serverName: string;
+            inputSchema: Record<string, unknown>;
+            exposureMode: "direct" | "discovery" | "hidden";
+            enabled: boolean;
+            exposed: boolean;
+            description?: string | undefined;
+            enabledBy?: "discovery" | "toolset" | undefined;
+            enabledAt?: number | undefined;
+          }[];
           discoverableTools: {
             fullName: string;
             originalName: string;
@@ -357,18 +357,6 @@ declare const AgentRuntimeNamespace: _$_makaio_core0.BusNamespaceDefinition<"age
         env?: Record<string, string> | undefined;
         mcpSessionContext?: {
           sessionId: string;
-          directTools: {
-            fullName: string;
-            originalName: string;
-            serverName: string;
-            inputSchema: Record<string, unknown>;
-            exposureMode: "direct" | "discovery" | "hidden";
-            enabled: boolean;
-            exposed: boolean;
-            description?: string | undefined;
-            enabledBy?: "discovery" | "toolset" | undefined;
-            enabledAt?: number | undefined;
-          }[];
           servers: {
             name: string;
             transport: {
@@ -398,6 +386,18 @@ declare const AgentRuntimeNamespace: _$_makaio_core0.BusNamespaceDefinition<"age
             };
             exposureMode: "direct" | "discovery";
           }[];
+          directTools: {
+            fullName: string;
+            originalName: string;
+            serverName: string;
+            inputSchema: Record<string, unknown>;
+            exposureMode: "direct" | "discovery" | "hidden";
+            enabled: boolean;
+            exposed: boolean;
+            description?: string | undefined;
+            enabledBy?: "discovery" | "toolset" | undefined;
+            enabledAt?: number | undefined;
+          }[];
           discoverableTools: {
             fullName: string;
             originalName: string;
@@ -434,9 +434,9 @@ declare const AgentRuntimeNamespace: _$_makaio_core0.BusNamespaceDefinition<"age
       status: _$zod.ZodEnum<{
         completed: "completed";
         cancelled: "cancelled";
+        failed: "failed";
         running: "running";
         waiting_input: "waiting_input";
-        failed: "failed";
       }>;
       result: _$zod.ZodOptional<_$zod.ZodString>;
       error: _$zod.ZodOptional<_$zod.ZodString>;
@@ -497,25 +497,6 @@ declare const AgentRuntimeSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.
         env: _$zod.ZodOptional<_$zod.ZodRecord<_$zod.ZodString, _$zod.ZodString>>;
         mcpSessionContext: _$zod.ZodOptional<_$zod.ZodObject<{
           sessionId: _$zod.ZodString;
-          directTools: _$zod.ZodArray<_$zod.ZodObject<{
-            fullName: _$zod.ZodString;
-            originalName: _$zod.ZodString;
-            serverName: _$zod.ZodString;
-            description: _$zod.ZodOptional<_$zod.ZodString>;
-            inputSchema: _$zod.ZodRecord<_$zod.ZodString, _$zod.ZodUnknown>;
-            exposureMode: _$zod.ZodEnum<{
-              direct: "direct";
-              discovery: "discovery";
-              hidden: "hidden";
-            }>;
-            enabled: _$zod.ZodBoolean;
-            enabledBy: _$zod.ZodOptional<_$zod.ZodEnum<{
-              discovery: "discovery";
-              toolset: "toolset";
-            }>>;
-            enabledAt: _$zod.ZodOptional<_$zod.ZodNumber>;
-            exposed: _$zod.ZodBoolean;
-          }, _$zod_v4_core0.$strip>>;
           servers: _$zod.ZodArray<_$zod.ZodObject<{
             name: _$zod.ZodString;
             transport: _$zod.ZodDiscriminatedUnion<[_$zod.ZodObject<{
@@ -556,6 +537,25 @@ declare const AgentRuntimeSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.
               discovery: "discovery";
             }>;
           }, _$zod_v4_core0.$strip>>;
+          directTools: _$zod.ZodArray<_$zod.ZodObject<{
+            fullName: _$zod.ZodString;
+            originalName: _$zod.ZodString;
+            serverName: _$zod.ZodString;
+            description: _$zod.ZodOptional<_$zod.ZodString>;
+            inputSchema: _$zod.ZodRecord<_$zod.ZodString, _$zod.ZodUnknown>;
+            exposureMode: _$zod.ZodEnum<{
+              direct: "direct";
+              discovery: "discovery";
+              hidden: "hidden";
+            }>;
+            enabled: _$zod.ZodBoolean;
+            enabledBy: _$zod.ZodOptional<_$zod.ZodEnum<{
+              discovery: "discovery";
+              toolset: "toolset";
+            }>>;
+            enabledAt: _$zod.ZodOptional<_$zod.ZodNumber>;
+            exposed: _$zod.ZodBoolean;
+          }, _$zod_v4_core0.$strip>>;
           discoverableTools: _$zod.ZodArray<_$zod.ZodObject<{
             fullName: _$zod.ZodString;
             originalName: _$zod.ZodString;
@@ -594,18 +594,6 @@ declare const AgentRuntimeSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.
         env?: Record<string, string> | undefined;
         mcpSessionContext?: {
           sessionId: string;
-          directTools: {
-            fullName: string;
-            originalName: string;
-            serverName: string;
-            inputSchema: Record<string, unknown>;
-            exposureMode: "direct" | "discovery" | "hidden";
-            enabled: boolean;
-            exposed: boolean;
-            description?: string | undefined;
-            enabledBy?: "discovery" | "toolset" | undefined;
-            enabledAt?: number | undefined;
-          }[];
           servers: {
             name: string;
             transport: {
@@ -635,6 +623,18 @@ declare const AgentRuntimeSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.
             };
             exposureMode: "direct" | "discovery";
           }[];
+          directTools: {
+            fullName: string;
+            originalName: string;
+            serverName: string;
+            inputSchema: Record<string, unknown>;
+            exposureMode: "direct" | "discovery" | "hidden";
+            enabled: boolean;
+            exposed: boolean;
+            description?: string | undefined;
+            enabledBy?: "discovery" | "toolset" | undefined;
+            enabledAt?: number | undefined;
+          }[];
           discoverableTools: {
             fullName: string;
             originalName: string;
@@ -669,18 +669,6 @@ declare const AgentRuntimeSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.
         env?: Record<string, string> | undefined;
         mcpSessionContext?: {
           sessionId: string;
-          directTools: {
-            fullName: string;
-            originalName: string;
-            serverName: string;
-            inputSchema: Record<string, unknown>;
-            exposureMode: "direct" | "discovery" | "hidden";
-            enabled: boolean;
-            exposed: boolean;
-            description?: string | undefined;
-            enabledBy?: "discovery" | "toolset" | undefined;
-            enabledAt?: number | undefined;
-          }[];
           servers: {
             name: string;
             transport: {
@@ -710,6 +698,18 @@ declare const AgentRuntimeSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.
             };
             exposureMode: "direct" | "discovery";
           }[];
+          directTools: {
+            fullName: string;
+            originalName: string;
+            serverName: string;
+            inputSchema: Record<string, unknown>;
+            exposureMode: "direct" | "discovery" | "hidden";
+            enabled: boolean;
+            exposed: boolean;
+            description?: string | undefined;
+            enabledBy?: "discovery" | "toolset" | undefined;
+            enabledAt?: number | undefined;
+          }[];
           discoverableTools: {
             fullName: string;
             originalName: string;
@@ -741,18 +741,6 @@ declare const AgentRuntimeSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.
         env?: Record<string, string> | undefined;
         mcpSessionContext?: {
           sessionId: string;
-          directTools: {
-            fullName: string;
-            originalName: string;
-            serverName: string;
-            inputSchema: Record<string, unknown>;
-            exposureMode: "direct" | "discovery" | "hidden";
-            enabled: boolean;
-            exposed: boolean;
-            description?: string | undefined;
-            enabledBy?: "discovery" | "toolset" | undefined;
-            enabledAt?: number | undefined;
-          }[];
           servers: {
             name: string;
             transport: {
@@ -782,6 +770,18 @@ declare const AgentRuntimeSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.
             };
             exposureMode: "direct" | "discovery";
           }[];
+          directTools: {
+            fullName: string;
+            originalName: string;
+            serverName: string;
+            inputSchema: Record<string, unknown>;
+            exposureMode: "direct" | "discovery" | "hidden";
+            enabled: boolean;
+            exposed: boolean;
+            description?: string | undefined;
+            enabledBy?: "discovery" | "toolset" | undefined;
+            enabledAt?: number | undefined;
+          }[];
           discoverableTools: {
             fullName: string;
             originalName: string;
@@ -816,18 +816,6 @@ declare const AgentRuntimeSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.
         env?: Record<string, string> | undefined;
         mcpSessionContext?: {
           sessionId: string;
-          directTools: {
-            fullName: string;
-            originalName: string;
-            serverName: string;
-            inputSchema: Record<string, unknown>;
-            exposureMode: "direct" | "discovery" | "hidden";
-            enabled: boolean;
-            exposed: boolean;
-            description?: string | undefined;
-            enabledBy?: "discovery" | "toolset" | undefined;
-            enabledAt?: number | undefined;
-          }[];
           servers: {
             name: string;
             transport: {
@@ -857,6 +845,18 @@ declare const AgentRuntimeSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.
             };
             exposureMode: "direct" | "discovery";
           }[];
+          directTools: {
+            fullName: string;
+            originalName: string;
+            serverName: string;
+            inputSchema: Record<string, unknown>;
+            exposureMode: "direct" | "discovery" | "hidden";
+            enabled: boolean;
+            exposed: boolean;
+            description?: string | undefined;
+            enabledBy?: "discovery" | "toolset" | undefined;
+            enabledAt?: number | undefined;
+          }[];
           discoverableTools: {
             fullName: string;
             originalName: string;
@@ -893,9 +893,9 @@ declare const AgentRuntimeSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.
       status: _$zod.ZodEnum<{
         completed: "completed";
         cancelled: "cancelled";
+        failed: "failed";
         running: "running";
         waiting_input: "waiting_input";
-        failed: "failed";
       }>;
       result: _$zod.ZodOptional<_$zod.ZodString>;
       error: _$zod.ZodOptional<_$zod.ZodString>;

package/dist/{namespace-CsnrP8AD.d.mts → namespace-CxXNlHpn.d.mts}

@@ -335,8 +335,8 @@ declare const MessageStorageNamespace$1: {
             isError: _$zod.ZodOptional<_$zod.ZodBoolean>;
           }, _$zod_v4_core0.$strip>], "type">>;
           agentId: _$zod.ZodOptional<_$zod.ZodString>;
-          adapterSessionId: _$zod.ZodOptional<_$zod.ZodString>;
           turnId: _$zod.ZodNullable<_$zod.ZodString>;
+          adapterSessionId: _$zod.ZodOptional<_$zod.ZodString>;
           timestamp: _$zod.ZodNumber;
           contentText: _$zod.ZodString;
           adapterMessageId: _$zod.ZodOptional<_$zod.ZodString>;
@@ -1120,8 +1120,8 @@ declare const MessageStorageNamespace$1: {
             isError: _$zod.ZodOptional<_$zod.ZodBoolean>;
           }, _$zod_v4_core0.$strip>], "type">>;
           agentId: _$zod.ZodOptional<_$zod.ZodString>;
-          adapterSessionId: _$zod.ZodOptional<_$zod.ZodString>;
           turnId: _$zod.ZodNullable<_$zod.ZodString>;
+          adapterSessionId: _$zod.ZodOptional<_$zod.ZodString>;
           timestamp: _$zod.ZodNumber;
           contentText: _$zod.ZodString;
           adapterMessageId: _$zod.ZodOptional<_$zod.ZodString>;
@@ -2030,8 +2030,8 @@ declare const MessageStorageNamespace$1: {
     })[];
     messageId: string;
     agentId: never;
-    adapterSessionId: never;
     turnId: string | null;
+    adapterSessionId: never;
     timestamp: number;
     limit: never;
     query: string;

package/dist/{namespace-CstawJgN.d.mts → namespace-DykqxEyX.d.mts}

@@ -37,9 +37,9 @@ declare const SubagentTemplateKernelNamespace: _$_makaio_core0.BusNamespaceDefin
       status: _$zod.ZodEnum<{
         completed: "completed";
         cancelled: "cancelled";
+        failed: "failed";
         running: "running";
         waiting_input: "waiting_input";
-        failed: "failed";
       }>;
       result: _$zod.ZodOptional<_$zod.ZodString>;
       error: _$zod.ZodOptional<_$zod.ZodString>;
@@ -101,9 +101,9 @@ declare const SubagentTemplateSubjects: _$_makaio_core0.BusSubjects<_$_makaio_co
       status: _$zod.ZodEnum<{
         completed: "completed";
         cancelled: "cancelled";
+        failed: "failed";
         running: "running";
         waiting_input: "waiting_input";
-        failed: "failed";
       }>;
       result: _$zod.ZodOptional<_$zod.ZodString>;
       error: _$zod.ZodOptional<_$zod.ZodString>;

package/dist/node/bus-server/index.d.mts

@@ -1,4 +1,4 @@
-import { i as BusServerConfig, n as startBusServer, r as BusServer, t as StartBusServerOptions } from "../../server-lifecycle-L8zja8t8.mjs";
+import { i as BusServerConfig, n as startBusServer, r as BusServer, t as StartBusServerOptions } from "../../server-lifecycle-WFZcCMwF.mjs";
 import { BusBroadcastMessage, BusMessage, BusRequestMessage, BusTransport, BusTransportError } from "@makaio/framework/bus";
 import { TransportAuth, WebSocketLike, WebSocketServerLike, WebSocketServerLike as WebSocketServerLike$1 } from "@makaio/framework/node/transports";
 

package/dist/node/bus-server/server-lifecycle.d.mts

@@ -1,2 +1,2 @@
-import { n as startBusServer, t as StartBusServerOptions } from "../../server-lifecycle-L8zja8t8.mjs";
+import { n as startBusServer, t as StartBusServerOptions } from "../../server-lifecycle-WFZcCMwF.mjs";
 export { StartBusServerOptions, startBusServer };

package/dist/node/transports/index.d.mts

@@ -221,6 +221,17 @@ declare class HmacAuth implements TransportAuth {
    * @throws Error if authentication fails
    */
   authenticateClient(send: (message: unknown) => void): Promise<void>;
+  /**
+   * Fence a client continuation whose handshake was cleaned up or replaced.
+   * @param owner - Pending challenge retained for the entire handshake.
+   */
+  private assertClientOwner;
+  /**
+   * Fence server crypto completion after socket cleanup.
+   * @param socket - Authenticating socket.
+   * @param owner - Pending response retained until authentication finishes.
+   */
+  private assertServerOwner;
   /**
    * Handle incoming message during authentication phase.
    *
@@ -302,13 +313,13 @@ declare class HmacAuth implements TransportAuth {
    * characters match, enabling timing-based secret recovery. This method decodes
    * both signatures to byte arrays and uses a constant-time XOR accumulator so
    * every comparison takes the same wall-clock time regardless of the match point.
-   * @param a - First hex signature
+   * @param a - Untrusted signature received from the peer
    * @param b - Second hex signature
    * @returns True when both signatures are identical
    */
   private constantTimeEqual;
   /**
-   * Send auth result messages without masking the original auth error.
+   * Send negative auth results without masking the original auth error.
    *
    * Disconnect races can make `send` throw after auth already failed; callers
    * should still observe the original failure reason.
@@ -484,6 +495,17 @@ declare class E2EAuth implements TransportAuth {
    * @param send - Function to send auth messages to the client
    */
   authenticateServer(socket: WebSocketLike, send: (message: unknown) => void): Promise<void>;
+  /**
+   * Reject a client continuation whose handshake was cleaned up or replaced.
+   * @param owner - Pending exchange that owns the handshake.
+   */
+  private assertClientOwner;
+  /**
+   * Reject server work that outlived its socket handshake.
+   * @param socket - Authenticating socket.
+   * @param owner - Pending exchange that owns this socket handshake.
+   */
+  private assertServerOwner;
   /**
    * Handle incoming message during authentication phase.
    * @param message - Parsed message object
@@ -996,6 +1018,20 @@ interface ClientTransportCodec {
   decode(message: unknown): Promise<BusMessage>;
 }
 //#endregion
+//#region transports/ws/src/connection-error.d.ts
+/** Stable connection failure categories; callers own the retry policy. */
+type WebSocketConnectionErrorCode = 'WS_CONNECTION_UNAVAILABLE' | 'WS_HANDSHAKE_TIMEOUT' | 'WS_CONNECTION_TIMEOUT' | 'WS_AUTHENTICATION_REJECTED' | 'WS_POLICY_REJECTED';
+/** A transport-classified failure, distinct from unknown factory, codec or auth errors. */
+declare class WebSocketConnectionError extends Error {
+  readonly code: WebSocketConnectionErrorCode;
+  /**
+   * @param code - Machine-readable failure category.
+   * @param message - Human-readable diagnostic.
+   * @param options - Original cause, when available.
+   */
+  constructor(code: WebSocketConnectionErrorCode, message: string, options?: ErrorOptions);
+}
+//#endregion
 //#region transports/ws/src/ws-client-reconnect.d.ts
 /**
  * Reconnection utilities for `WebSocketClientTransport`.
@@ -1107,16 +1143,15 @@ interface WebSocketClientTransportOptions {
    */
   heartbeat?: WebSocketClientTransportHeartbeatOptions | false;
   /**
-   * Maximum time in milliseconds a single connect attempt may wait for the
-   * socket to open before the attempt is failed and the socket discarded.
+   * Maximum time in milliseconds for one complete connection attempt:
+   * asynchronous socket creation, opening, authentication and subscription replay.
    *
    * Bounds the WebSocket upgrade so a server (or intermediary) that accepts
    * the TCP connection but never answers cannot wedge the reconnect loop.
-   * Also passed as `handshakeTimeout` to the default `ws` factory.
-   *
-   * This bound starts after `createWebSocket` resolves with a socket instance.
-   * Custom async factories that may block before returning a socket should
-   * enforce their own factory-level timeout.
+   * The budget starts before `createWebSocket` is called. If a cancelled factory
+   * resolves later, its socket is closed without becoming the active connection.
+   * This does not include waiting for the peer's subscribe-sync-complete frame;
+   * callers requiring a total bootstrap-readiness budget must also bound `ready`.
    * @defaultValue 30000
    */
   connectTimeoutMs?: number;
@@ -1180,7 +1215,7 @@ declare class WebSocketClientTransport implements BusTransport {
   private readonly debug;
   private readonly onConnectedCallback;
   private readonly onDisconnectedCallback;
-  private socket;
+  private session;
   private authComplete;
   private readonly correlations;
   private readonly handlers;
@@ -1189,12 +1224,12 @@ declare class WebSocketClientTransport implements BusTransport {
   private subscriptionAckSeq;
   private messageListener;
   private closeListener;
-  /** AbortController for the active reconnect loop; `null` when not connected. */
+  /** Owns initial connection and its reconnect loop; `null` when disconnected. */
   private reconnectAbort;
   /**
    * In-flight `handleInboundMessage` promises for the current socket session.
    *
-   * Reset to a new `Set` at the start of each connection attempt so that the
+   * Drained and cleared at the start of each connection attempt so that the
    * drain-before-rejectAll logic in `drainAndRejectPendingCorrelations` only
    * waits on the promises belonging to the active session.
    */
@@ -1218,6 +1253,11 @@ declare class WebSocketClientTransport implements BusTransport {
   onConnected: (() => void) | undefined;
   /** Set by the transport registry; called when the connection drops unexpectedly. */
   onDisconnected: (() => void) | undefined;
+  /**
+   * Current socket remains owned during buffered reply drain, even after termination.
+   * @returns The retained socket, or null after its release.
+   */
+  private get socket();
   /**
    * Create a new `WebSocketClientTransport`.
    * @param options - Transport configuration
@@ -1334,9 +1374,9 @@ declare class WebSocketClientTransport implements BusTransport {
   /**
    * Default `ws`-package WebSocket factory (dynamic import avoids bundling in browsers).
    *
-   * Passes `connectTimeoutMs` as the `ws` handshake timeout so the protocol
-   * layer enforces the same bound as `waitForSocketOpen` (defense in depth —
-   * the `ws` default is no handshake timeout at all).
+   * The connection lifecycle owns the single timeout budget, including this
+   * import and socket creation. A second protocol timer would race its typed
+   * outcome and give callers an unstable failure category.
    * @param url - WebSocket server URL
    * @returns Promise resolving to a `WebSocketLike` instance
    */
@@ -2081,4 +2121,4 @@ declare module '@makaio/framework/bus' {
   }
 }
 //#endregion
-export { type ClientTransportCodec, DispatchingAuth, E2EAuth, E2ERelayAuth, type E2ERelayAuthOptions, HmacAuth, type HmacIdentitySecretRegistrationOptions, type HmacIdentitySecretRotationOptions, type RelayControlBusMessage, type RelayControlEnvelopeMessage, type RelayControlHelpers, type RelayControlRegistry, ServerTransport, type TransportAuth, WebSocketClientTransport, type WebSocketClientTransportHeartbeatOptions, type WebSocketClientTransportOptions, type WebSocketClientTransportReconnectOptions, type WebSocketCloseEvent, type WebSocketLike, type WebSocketServerLike, clearHmacIdentitySecretsForTesting, createE2EClientTransport, createE2ERelayClientTransport, createE2ERelayCodec, createRelayControlHelpers, createRelayControlRegistry, createWebSocketCloseEvent, createWebSocketTransport, index_d_exports as crypto, extractSocketErrorMessage, registerHmacIdentitySecret, resolveHmacIdentityAllowedSubjects, resolveHmacIdentityPeer, resolveHmacIdentitySecret, rotateHmacIdentitySecret };
+export { type ClientTransportCodec, DispatchingAuth, E2EAuth, E2ERelayAuth, type E2ERelayAuthOptions, HmacAuth, type HmacIdentitySecretRegistrationOptions, type HmacIdentitySecretRotationOptions, type RelayControlBusMessage, type RelayControlEnvelopeMessage, type RelayControlHelpers, type RelayControlRegistry, ServerTransport, type TransportAuth, WebSocketClientTransport, type WebSocketClientTransportHeartbeatOptions, type WebSocketClientTransportOptions, type WebSocketClientTransportReconnectOptions, type WebSocketCloseEvent, WebSocketConnectionError, type WebSocketConnectionErrorCode, type WebSocketLike, type WebSocketServerLike, clearHmacIdentitySecretsForTesting, createE2EClientTransport, createE2ERelayClientTransport, createE2ERelayCodec, createRelayControlHelpers, createRelayControlRegistry, createWebSocketCloseEvent, createWebSocketTransport, index_d_exports as crypto, extractSocketErrorMessage, registerHmacIdentitySecret, resolveHmacIdentityAllowedSubjects, resolveHmacIdentityPeer, resolveHmacIdentitySecret, rotateHmacIdentitySecret };