@mdbase-dev/sdk 0.0.0-stage → 0.1.0-beta.153

package/dist/transport/noise.js

@@ -0,0 +1,307 @@
+/**
+ * `Noise_IK_25519_ChaChaPoly_SHA256` (the Noise Protocol Framework, revision 34),
+ * initiator and responder, for client sessions (`replica-client-api.md` §12.3).
+ *
+ * IK: the initiator (the client, static key = the grant's `client_pk`) already knows
+ * the responder's static key (the replica's enrolled `noise_pk`, from the control
+ * plane). One round trip gives mutual authentication.
+ *
+ * ```text
+ * <- s
+ * ...
+ * -> e, es, s, ss
+ * <- e, ee, se
+ * ```
+ *
+ * Checked against the cacophony test vector in `test/fixtures/`.
+ */
+import { chacha20poly1305 } from "@noble/ciphers/chacha.js";
+import { x25519 } from "@noble/curves/ed25519.js";
+import { hmac } from "@noble/hashes/hmac.js";
+import { sha256 } from "@noble/hashes/sha2.js";
+export const PROTOCOL_NAME = "Noise_IK_25519_ChaChaPoly_SHA256";
+const DHLEN = 32;
+const HASHLEN = 32;
+/** Noise's maximum message size. */
+export const MAX_MESSAGE = 65535;
+const TAGLEN = 16;
+/** The most plaintext one transport message can carry. */
+export const MAX_PLAINTEXT = MAX_MESSAGE - TAGLEN;
+/** Rekeying is not used: sessions end after 2^30 messages (§12.3). */
+export const MAX_SESSION_MESSAGES = 2 ** 30;
+export function staticKeyOf(k) {
+    if ("dh" in k)
+        return k;
+    return { publicKey: k.publicKey, dh: (pk) => dh(k.secretKey, pk) };
+}
+async function staticDh(k, pk) {
+    let out;
+    try {
+        out = await k.dh(pk);
+    }
+    catch (e) {
+        if (e instanceof NoiseError)
+            throw e;
+        throw new NoiseError("invalid public key");
+    }
+    return checkDh(out);
+}
+export function generateKeyPair() {
+    const secretKey = x25519.utils.randomSecretKey();
+    return { secretKey, publicKey: x25519.getPublicKey(secretKey) };
+}
+export function keyPairFromSecret(secretKey) {
+    return { secretKey, publicKey: x25519.getPublicKey(secretKey) };
+}
+function concat(...parts) {
+    let n = 0;
+    for (const p of parts)
+        n += p.length;
+    const out = new Uint8Array(n);
+    let o = 0;
+    for (const p of parts) {
+        out.set(p, o);
+        o += p.length;
+    }
+    return out;
+}
+/** Reject all-zero outputs: a low-order or all-zero public key. */
+export function checkDh(out) {
+    let acc = 0;
+    for (const b of out)
+        acc |= b;
+    if (acc === 0)
+        throw new NoiseError("invalid public key (all-zero shared secret)");
+    return out;
+}
+function dh(sk, pk) {
+    let out;
+    try {
+        out = x25519.getSharedSecret(sk, pk);
+    }
+    catch {
+        throw new NoiseError("invalid public key");
+    }
+    return checkDh(out);
+}
+function hkdf2(ck, ikm) {
+    const temp = hmac(sha256, ck, ikm);
+    const o1 = hmac(sha256, temp, Uint8Array.of(1));
+    const o2 = hmac(sha256, temp, concat(o1, Uint8Array.of(2)));
+    return [o1, o2];
+}
+function nonce12(n) {
+    // 32 bits of zeros followed by the 64-bit little-endian counter.
+    const b = new Uint8Array(12);
+    const v = new DataView(b.buffer);
+    v.setUint32(4, n >>> 0, true);
+    v.setUint32(8, Math.floor(n / 2 ** 32), true);
+    return b;
+}
+export class NoiseError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "NoiseError";
+    }
+}
+/** A Noise CipherState. */
+export class CipherState {
+    k;
+    n = 0;
+    constructor(k = null) {
+        this.k = k;
+    }
+    hasKey() {
+        return this.k !== null;
+    }
+    get count() {
+        return this.n;
+    }
+    encrypt(ad, plaintext) {
+        if (!this.k)
+            return plaintext;
+        if (this.n >= MAX_SESSION_MESSAGES)
+            throw new NoiseError("session message limit reached");
+        const c = chacha20poly1305(this.k, nonce12(this.n), ad).encrypt(plaintext);
+        this.n++;
+        return c;
+    }
+    decrypt(ad, ciphertext) {
+        if (!this.k)
+            return ciphertext;
+        if (this.n >= MAX_SESSION_MESSAGES)
+            throw new NoiseError("session message limit reached");
+        let p;
+        try {
+            p = chacha20poly1305(this.k, nonce12(this.n), ad).decrypt(ciphertext);
+        }
+        catch {
+            throw new NoiseError("decryption failed");
+        }
+        this.n++;
+        return p;
+    }
+}
+class SymmetricState {
+    ck;
+    h;
+    cs = new CipherState();
+    constructor(protocolName) {
+        const name = new TextEncoder().encode(protocolName);
+        if (name.length <= HASHLEN) {
+            this.h = new Uint8Array(HASHLEN);
+            this.h.set(name);
+        }
+        else {
+            this.h = sha256(name);
+        }
+        this.ck = this.h;
+    }
+    mixKey(ikm) {
+        const [ck, k] = hkdf2(this.ck, ikm);
+        this.ck = ck;
+        this.cs = new CipherState(k);
+    }
+    mixHash(data) {
+        this.h = sha256(concat(this.h, data));
+    }
+    encryptAndHash(plaintext) {
+        const c = this.cs.encrypt(this.h, plaintext);
+        this.mixHash(c);
+        return c;
+    }
+    decryptAndHash(ciphertext) {
+        const p = this.cs.decrypt(this.h, ciphertext);
+        this.mixHash(ciphertext);
+        return p;
+    }
+    split() {
+        const [k1, k2] = hkdf2(this.ck, new Uint8Array(0));
+        return [new CipherState(k1), new CipherState(k2)];
+    }
+}
+/** The initiator (client) side of IK. */
+export class IkInitiator {
+    opts;
+    ss = new SymmetricState(PROTOCOL_NAME);
+    e;
+    state = "start";
+    constructor(opts) {
+        this.opts = opts;
+        if (opts.remoteStatic.length !== DHLEN)
+            throw new NoiseError("remote static key must be 32 bytes");
+        this.e = opts.ephemeral ?? generateKeyPair();
+        this.ss.mixHash(opts.prologue);
+        this.ss.mixHash(opts.remoteStatic);
+    }
+    /** `-> e, es, s, ss` with `payload`. */
+    async writeMessage1(payload) {
+        if (this.state !== "start")
+            throw new NoiseError("handshake out of order");
+        this.state = "sent";
+        const st = staticKeyOf(this.opts.staticKey);
+        const ss = this.ss;
+        ss.mixHash(this.e.publicKey);
+        ss.mixKey(dh(this.e.secretKey, this.opts.remoteStatic));
+        const s = ss.encryptAndHash(st.publicKey);
+        ss.mixKey(await staticDh(st, this.opts.remoteStatic));
+        const p = ss.encryptAndHash(payload);
+        const msg = concat(this.e.publicKey, s, p);
+        if (msg.length > MAX_MESSAGE)
+            throw new NoiseError("handshake message too large");
+        return msg;
+    }
+    /** `<- e, ee, se`; returns the responder's payload and the transport ciphers. */
+    async readMessage2(msg) {
+        if (this.state !== "sent")
+            throw new NoiseError("handshake out of order");
+        if (msg.length < DHLEN + TAGLEN)
+            throw new NoiseError("handshake message too short");
+        this.state = "done";
+        const ss = this.ss;
+        const re = msg.subarray(0, DHLEN);
+        ss.mixHash(re);
+        ss.mixKey(dh(this.e.secretKey, re));
+        ss.mixKey(await staticDh(staticKeyOf(this.opts.staticKey), re));
+        const payload = ss.decryptAndHash(msg.subarray(DHLEN));
+        const [c1, c2] = ss.split();
+        return {
+            payload,
+            transport: { send: c1, recv: c2, handshakeHash: ss.h, remoteStatic: this.opts.remoteStatic },
+        };
+    }
+}
+/**
+ * The responder (replica) side of IK. The SDK uses it for tests and for apps that
+ * host a replica in the same JS process and accept remote clients.
+ */
+export class IkResponder {
+    opts;
+    ss = new SymmetricState(PROTOCOL_NAME);
+    e;
+    rs = null;
+    re = null;
+    state = "start";
+    constructor(opts) {
+        this.opts = opts;
+        this.e = opts.ephemeral ?? generateKeyPair();
+        this.ss.mixHash(opts.prologue);
+        this.ss.mixHash(opts.staticKey.publicKey);
+    }
+    /** Read `-> e, es, s, ss`; returns the initiator's static key and payload. */
+    readMessage1(msg) {
+        if (this.state !== "start")
+            throw new NoiseError("handshake out of order");
+        // Any failure below leaves the responder unusable: a handshake is single-shot.
+        this.state = "done";
+        if (msg.length < DHLEN + DHLEN + TAGLEN + TAGLEN)
+            throw new NoiseError("handshake message too short");
+        const ss = this.ss;
+        const re = msg.subarray(0, DHLEN).slice();
+        ss.mixHash(re);
+        ss.mixKey(dh(this.opts.staticKey.secretKey, re));
+        const rs = ss.decryptAndHash(msg.subarray(DHLEN, DHLEN + DHLEN + TAGLEN));
+        ss.mixKey(dh(this.opts.staticKey.secretKey, rs));
+        const payload = ss.decryptAndHash(msg.subarray(DHLEN + DHLEN + TAGLEN));
+        this.re = re;
+        this.rs = rs;
+        this.state = "read";
+        return { remoteStatic: rs, payload };
+    }
+    /** `<- e, ee, se` with `payload`. */
+    writeMessage2(payload) {
+        if (this.state !== "read" || !this.re || !this.rs)
+            throw new NoiseError("handshake out of order");
+        this.state = "done";
+        const ss = this.ss;
+        ss.mixHash(this.e.publicKey);
+        ss.mixKey(dh(this.e.secretKey, this.re));
+        ss.mixKey(dh(this.e.secretKey, this.rs));
+        const p = ss.encryptAndHash(payload);
+        const [c1, c2] = ss.split();
+        return {
+            message: concat(this.e.publicKey, p),
+            transport: { send: c2, recv: c1, handshakeHash: ss.h, remoteStatic: this.rs },
+        };
+    }
+}
+const PROLOGUE_TAG = new TextEncoder().encode("mdbase/v1/client");
+const NIL_UUID = new Uint8Array(16);
+/**
+ * The client session prologue: `"mdbase/v1/client" ‖ collection ‖ grant ID ‖ target
+ * device ID`, each ID as 16 raw bytes. A session without a grant (the hosting app)
+ * uses the nil UUID for the grant ID.
+ */
+export function clientPrologue(collection, grant, targetDevice) {
+    for (const [n, b] of [
+        ["collection", collection],
+        ["target device", targetDevice],
+    ]) {
+        if (b.length !== 16)
+            throw new NoiseError(`${n} ID must be 16 bytes`);
+    }
+    if (grant && grant.length !== 16)
+        throw new NoiseError("grant ID must be 16 bytes");
+    return concat(PROLOGUE_TAG, collection, grant ?? NIL_UUID, targetDevice);
+}
+//# sourceMappingURL=noise.js.map

package/dist/transport/noise.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"noise.js","sourceRoot":"","sources":["../../src/transport/noise.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,MAAM,CAAC,MAAM,aAAa,GAAG,kCAAkC,CAAC;AAChE,MAAM,KAAK,GAAG,EAAE,CAAC;AACjB,MAAM,OAAO,GAAG,EAAE,CAAC;AACnB,oCAAoC;AACpC,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC;AACjC,MAAM,MAAM,GAAG,EAAE,CAAC;AAClB,0DAA0D;AAC1D,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,GAAG,MAAM,CAAC;AAClD,sEAAsE;AACtE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,IAAI,EAAE,CAAC;AAgB5C,MAAM,UAAU,WAAW,CAAC,CAAsB;IAChD,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACxB,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,CAAY,EAAE,EAAc;IAClD,IAAI,GAAe,CAAC;IACpB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,UAAU;YAAE,MAAM,CAAC,CAAC;QACrC,MAAM,IAAI,UAAU,CAAC,oBAAoB,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;IACjD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAAqB;IACrD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,MAAM,CAAC,GAAG,KAAmB;IACpC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACd,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,OAAO,CAAC,GAAe;IACrC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,GAAG,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,6CAA6C,CAAC,CAAC;IACnF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,EAAE,CAAC,EAAc,EAAE,EAAc;IACxC,IAAI,GAAe,CAAC;IACpB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,oBAAoB,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,KAAK,CAAC,EAAc,EAAE,GAAe;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,iEAAiE;IACjE,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,OAAO,UAAW,SAAQ,KAAK;IACnC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAED,2BAA2B;AAC3B,MAAM,OAAO,WAAW;IAEF;IADZ,CAAC,GAAG,CAAC,CAAC;IACd,YAAoB,IAAuB,IAAI;QAA3B,MAAC,GAAD,CAAC,CAA0B;IAAG,CAAC;IAEnD,MAAM;QACJ,OAAO,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC;IACzB,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,CAAC,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,EAAc,EAAE,SAAqB;QAC3C,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9B,IAAI,IAAI,CAAC,CAAC,IAAI,oBAAoB;YAAE,MAAM,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAC;QAC1F,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3E,IAAI,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,EAAc,EAAE,UAAsB;QAC5C,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,UAAU,CAAC;QAC/B,IAAI,IAAI,CAAC,CAAC,IAAI,oBAAoB;YAAE,MAAM,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAC;QAC1F,IAAI,CAAa,CAAC;QAClB,IAAI,CAAC;YACH,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,UAAU,CAAC,mBAAmB,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,CAAC,CAAC;IACX,CAAC;CACF;AAED,MAAM,cAAc;IAClB,EAAE,CAAa;IACf,CAAC,CAAa;IACd,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAEvB,YAAY,YAAoB;QAC9B,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACnB,CAAC;IAED,MAAM,CAAC,GAAe;QACpB,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,CAAC,IAAgB;QACtB,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,cAAc,CAAC,SAAqB;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,cAAc,CAAC,UAAsB;QACnC,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK;QACH,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,WAAW,CAAC,EAAE,CAAC,EAAE,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;CACF;AAoBD,yCAAyC;AACzC,MAAM,OAAO,WAAW;IAKF;IAJZ,EAAE,GAAG,IAAI,cAAc,CAAC,aAAa,CAAC,CAAC;IACvC,CAAC,CAAU;IACX,KAAK,GAA8B,OAAO,CAAC;IAEnD,YAAoB,IAAsB;QAAtB,SAAI,GAAJ,IAAI,CAAkB;QACxC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,KAAK;YAAE,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAC;QACnG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,eAAe,EAAE,CAAC;QAC7C,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrC,CAAC;IAED,wCAAwC;IACxC,KAAK,CAAC,aAAa,CAAC,OAAmB;QACrC,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO;YAAE,MAAM,IAAI,UAAU,CAAC,wBAAwB,CAAC,CAAC;QAC3E,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;QACpB,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7B,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1C,EAAE,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3C,IAAI,GAAG,CAAC,MAAM,GAAG,WAAW;YAAE,MAAM,IAAI,UAAU,CAAC,6BAA6B,CAAC,CAAC;QAClF,OAAO,GAAG,CAAC;IACb,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,YAAY,CAAC,GAAe;QAChC,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;YAAE,MAAM,IAAI,UAAU,CAAC,wBAAwB,CAAC,CAAC;QAC1E,IAAI,GAAG,CAAC,MAAM,GAAG,KAAK,GAAG,MAAM;YAAE,MAAM,IAAI,UAAU,CAAC,6BAA6B,CAAC,CAAC;QACrF,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;QACpB,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAClC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACf,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QACpC,EAAE,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACvD,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;QAC5B,OAAO;YACL,OAAO;YACP,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;SAC7F,CAAC;IACJ,CAAC;CACF;AAQD;;;GAGG;AACH,MAAM,OAAO,WAAW;IAOF;IANZ,EAAE,GAAG,IAAI,cAAc,CAAC,aAAa,CAAC,CAAC;IACvC,CAAC,CAAU;IACX,EAAE,GAAsB,IAAI,CAAC;IAC7B,EAAE,GAAsB,IAAI,CAAC;IAC7B,KAAK,GAA8B,OAAO,CAAC;IAEnD,YAAoB,IAAsB;QAAtB,SAAI,GAAJ,IAAI,CAAkB;QACxC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,eAAe,EAAE,CAAC;QAC7C,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,8EAA8E;IAC9E,YAAY,CAAC,GAAe;QAC1B,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO;YAAE,MAAM,IAAI,UAAU,CAAC,wBAAwB,CAAC,CAAC;QAC3E,+EAA+E;QAC/E,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;QACpB,IAAI,GAAG,CAAC,MAAM,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM;YAAE,MAAM,IAAI,UAAU,CAAC,6BAA6B,CAAC,CAAC;QACtG,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1C,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACf,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QACjD,MAAM,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC;QAC1E,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;QACpB,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;IACvC,CAAC;IAED,qCAAqC;IACrC,aAAa,CAAC,OAAmB;QAC/B,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,UAAU,CAAC,wBAAwB,CAAC,CAAC;QAClG,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;QACpB,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7B,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACzC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;QAC5B,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YACpC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE;SAC9E,CAAC;IACJ,CAAC;CACF;AAED,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAClE,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;AAEpC;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,UAAsB,EAAE,KAAwB,EAAE,YAAwB;IACvG,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI;QACnB,CAAC,YAAY,EAAE,UAAU,CAAC;QAC1B,CAAC,eAAe,EAAE,YAAY,CAAC;KACvB,EAAE,CAAC;QACX,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,UAAU,CAAC,2BAA2B,CAAC,CAAC;IACpF,OAAO,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,KAAK,IAAI,QAAQ,EAAE,YAAY,CAAC,CAAC;AAC3E,CAAC"}

package/dist/transport/original-session.d.ts

@@ -0,0 +1,6 @@
+/** Original HeldGrant provenance travels with the connector's port, never a new store read. */
+import type { FramePort } from "./port.js";
+import type { StoredAppGrant } from "../app-grant/grant-store.js";
+export declare function bindOriginalAppGrant(port: FramePort, grant: StoredAppGrant): void;
+export declare function inheritOriginalAppGrant(port: FramePort, session: object): void;
+export declare function originalAppGrant(session: object): StoredAppGrant | undefined;

package/dist/transport/original-session.js

@@ -0,0 +1,6 @@
+const originals = new WeakMap();
+export function bindOriginalAppGrant(port, grant) { originals.set(port, grant); }
+export function inheritOriginalAppGrant(port, session) { const grant = originals.get(port); if (grant)
+    originals.set(session, grant); }
+export function originalAppGrant(session) { return originals.get(session); }
+//# sourceMappingURL=original-session.js.map

package/dist/transport/original-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"original-session.js","sourceRoot":"","sources":["../../src/transport/original-session.ts"],"names":[],"mappings":"AAGA,MAAM,SAAS,GAAC,IAAI,OAAO,EAAyB,CAAC;AACrD,MAAM,UAAU,oBAAoB,CAAC,IAAc,EAAC,KAAoB,IAAO,SAAS,CAAC,GAAG,CAAC,IAAI,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC;AAC1G,MAAM,UAAU,uBAAuB,CAAC,IAAc,EAAC,OAAc,IAAO,MAAM,KAAK,GAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA,IAAG,KAAK;IAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC;AACnJ,MAAM,UAAU,gBAAgB,CAAC,OAAc,IAA2B,OAAO,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA,CAAC"}

package/dist/transport/port.d.ts

@@ -0,0 +1,67 @@
+/**
+ * The transport seam. Every transport ends in a {@link FramePort}: a duplex channel of
+ * client frames as decoded `mdb-cbor/1` values (`replica-client-api.md` §1, §12).
+ *
+ * - In-process: the shared runtime hands out a port directly (§12.1).
+ * - Local IPC and relay: bytes, Noise, `u32be(length) ‖ frame` records, turned into a
+ *   port by {@link framedPort}.
+ *
+ * A {@link Connector} opens a port and performs the `hello` exchange, because over
+ * Noise the hello travels inside the handshake (§12.3).
+ */
+import { CborValue } from "../cbor.js";
+import { MdbaseError } from "../errors.js";
+export interface FramePort {
+    /** Optional trusted app-host READ bridge on this exact held session.
+     * Byte transports use explicit native Bases READ frames, never a generic query. */
+    readAppBases?(request: Uint8Array, signal?: AbortSignal): Promise<Uint8Array>;
+    readAppBasesDiscovery?(operation: "list-views" | "read-view-source", request: Uint8Array, signal?: AbortSignal): Promise<Uint8Array>;
+    send(frame: CborValue): void;
+    /** Set by the session. Called once per received frame. */
+    onframe: ((frame: CborValue) => void) | null;
+    /** Called once, when the port closes for any reason. */
+    onclose: ((error?: MdbaseError) => void) | null;
+    close(): void;
+}
+export interface OpenedPort {
+    port: FramePort;
+    /** The `c-response` frame answering the `hello` request. */
+    helloResponse: CborValue;
+    /** The replica's device ID, when the transport authenticated it (Noise target). */
+    device?: string;
+}
+/** Opens a port to a replica and performs the hello exchange. */
+export interface Connector {
+    /** `hello` is the complete `c-request` frame (request ID 0). */
+    open(hello: CborValue, signal?: AbortSignal): Promise<OpenedPort>;
+    /** A short description for diagnostics ("in-process", "ipc:/run/…", "relay:…"). */
+    readonly description: string;
+}
+/** Maximum frame size on byte transports (§12.2). */
+export declare const MAX_FRAME: number;
+/**
+ * Splits a byte stream into `u32be(length) ‖ frame` records. Feed it chunks; it
+ * returns complete frames.
+ */
+export declare class RecordReader {
+    private chunks;
+    private head;
+    private buffered;
+    push(chunk: Uint8Array): Uint8Array[];
+    private peek;
+    private take;
+    private skip;
+}
+export declare function record(frame: Uint8Array): Uint8Array;
+/** A byte channel carrying the plaintext record stream (after Noise, if any). */
+export interface ByteChannel {
+    write(bytes: Uint8Array): void;
+    ondata: ((bytes: Uint8Array) => void) | null;
+    onclose: ((error?: MdbaseError) => void) | null;
+    close(): void;
+}
+export declare function supportsNativeBasesRpc(port: FramePort): boolean;
+/** Turn a byte channel of `u32be(length) ‖ frame` records into a frame port. */
+export declare function framedPort(ch: ByteChannel): FramePort;
+/** Two connected in-memory ports (tests, and same-process hosts). */
+export declare function portPair(): [FramePort, FramePort];

package/dist/transport/port.js

@@ -0,0 +1,184 @@
+/**
+ * The transport seam. Every transport ends in a {@link FramePort}: a duplex channel of
+ * client frames as decoded `mdb-cbor/1` values (`replica-client-api.md` §1, §12).
+ *
+ * - In-process: the shared runtime hands out a port directly (§12.1).
+ * - Local IPC and relay: bytes, Noise, `u32be(length) ‖ frame` records, turned into a
+ *   port by {@link framedPort}.
+ *
+ * A {@link Connector} opens a port and performs the `hello` exchange, because over
+ * Noise the hello travels inside the handshake (§12.3).
+ */
+import { decode, encode } from "../cbor.js";
+import { mdbaseError, MdbaseError } from "../errors.js";
+/** Maximum frame size on byte transports (§12.2). */
+export const MAX_FRAME = 16 * 1024 * 1024;
+/**
+ * Splits a byte stream into `u32be(length) ‖ frame` records. Feed it chunks; it
+ * returns complete frames.
+ */
+export class RecordReader {
+    // Chunks are kept as a list and copied once per complete frame, so reading is
+    // linear in the bytes received (no re-concatenation per chunk).
+    chunks = [];
+    head = 0; // offset into chunks[0]
+    buffered = 0;
+    push(chunk) {
+        if (chunk.length) {
+            this.chunks.push(chunk);
+            this.buffered += chunk.length;
+        }
+        const out = [];
+        for (;;) {
+            if (this.buffered < 4)
+                break;
+            const len = new DataView(this.peek(4).buffer).getUint32(0);
+            if (len > MAX_FRAME)
+                throw mdbaseError("too_large", `frame of ${len} bytes exceeds ${MAX_FRAME}`);
+            if (this.buffered < 4 + len)
+                break;
+            this.skip(4);
+            out.push(this.take(len));
+        }
+        return out;
+    }
+    peek(n) {
+        const out = new Uint8Array(n);
+        let o = 0;
+        let off = this.head;
+        for (const c of this.chunks) {
+            const k = Math.min(n - o, c.length - off);
+            out.set(c.subarray(off, off + k), o);
+            o += k;
+            off = 0;
+            if (o === n)
+                break;
+        }
+        return out;
+    }
+    take(n) {
+        const out = this.peek(n);
+        this.skip(n);
+        return out;
+    }
+    skip(n) {
+        this.buffered -= n;
+        while (n > 0) {
+            const c = this.chunks[0];
+            const avail = c.length - this.head;
+            if (n < avail) {
+                this.head += n;
+                return;
+            }
+            n -= avail;
+            this.chunks.shift();
+            this.head = 0;
+        }
+    }
+}
+export function record(frame) {
+    if (frame.length > MAX_FRAME)
+        throw mdbaseError("too_large", `frame of ${frame.length} bytes exceeds ${MAX_FRAME}`);
+    const out = new Uint8Array(4 + frame.length);
+    new DataView(out.buffer).setUint32(0, frame.length);
+    out.set(frame, 4);
+    return out;
+}
+// Only actual byte-frame transports use the native replica READ operations.
+// Not a peer/hello authority claim or a caller-supplied session identity.
+const nativeBasesRpcPorts = new WeakSet();
+export function supportsNativeBasesRpc(port) { return nativeBasesRpcPorts.has(port); }
+/** Turn a byte channel of `u32be(length) ‖ frame` records into a frame port. */
+export function framedPort(ch) {
+    const reader = new RecordReader();
+    let closed = false;
+    // Frames that arrive before the session installs its handler are held, so nothing
+    // pushed right after the handshake is lost.
+    let handler = null;
+    const held = [];
+    const port = {
+        get onframe() {
+            return handler;
+        },
+        set onframe(h) {
+            handler = h;
+            if (h && held.length)
+                for (const f of held.splice(0))
+                    h(f);
+        },
+        onclose: null,
+        send(frame) {
+            if (closed)
+                throw mdbaseError("unavailable", "connection closed");
+            ch.write(record(encode(frame)));
+        },
+        close() {
+            if (closed)
+                return;
+            closed = true;
+            ch.close();
+            port.onclose?.();
+        },
+    };
+    nativeBasesRpcPorts.add(port);
+    ch.ondata = (bytes) => {
+        try {
+            for (const f of reader.push(bytes)) {
+                const v = decode(f);
+                if (handler)
+                    handler(v);
+                else if (held.length < 1024)
+                    held.push(v);
+                else
+                    throw mdbaseError("too_large", "too many frames before the session started");
+            }
+        }
+        catch (e) {
+            // A peer that sends non-canonical or oversized frames is broken: drop the link.
+            fail(e instanceof MdbaseError ? e : mdbaseError("internal", `invalid frame from replica: ${String(e)}`));
+        }
+    };
+    ch.onclose = (err) => fail(err);
+    function fail(err) {
+        if (closed)
+            return;
+        closed = true;
+        ch.close();
+        port.onclose?.(err);
+    }
+    return port;
+}
+/** Two connected in-memory ports (tests, and same-process hosts). */
+export function portPair() {
+    const mk = () => ({
+        onframe: null,
+        onclose: null,
+        closed: false,
+        send(frame) {
+            if (this.closed)
+                throw mdbaseError("unavailable", "connection closed");
+            const peer = this.peer;
+            queueMicrotask(() => {
+                if (!peer.closed)
+                    peer.onframe?.(frame);
+            });
+        },
+        close() {
+            if (this.closed)
+                return;
+            this.closed = true;
+            this.onclose?.();
+            const peer = this.peer;
+            if (!peer.closed) {
+                peer.closed = true;
+                queueMicrotask(() => peer.onclose?.());
+            }
+        },
+    });
+    const a = mk();
+    const b = mk();
+    a.peer = b;
+    b.peer = a;
+    return [a, b];
+}
+//# sourceMappingURL=port.js.map

package/dist/transport/port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"port.js","sourceRoot":"","sources":["../../src/transport/port.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAa,MAAM,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AA+BxD,qDAAqD;AACrD,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE1C;;;GAGG;AACH,MAAM,OAAO,YAAY;IACvB,8EAA8E;IAC9E,gEAAgE;IACxD,MAAM,GAAiB,EAAE,CAAC;IAC1B,IAAI,GAAG,CAAC,CAAC,CAAC,wBAAwB;IAClC,QAAQ,GAAG,CAAC,CAAC;IAErB,IAAI,CAAC,KAAiB;QACpB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC;QAChC,CAAC;QACD,MAAM,GAAG,GAAiB,EAAE,CAAC;QAC7B,SAAS,CAAC;YACR,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC;gBAAE,MAAM;YAC7B,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC3D,IAAI,GAAG,GAAG,SAAS;gBAAE,MAAM,WAAW,CAAC,WAAW,EAAE,YAAY,GAAG,kBAAkB,SAAS,EAAE,CAAC,CAAC;YAClG,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC,GAAG,GAAG;gBAAE,MAAM;YACnC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,IAAI,CAAC,CAAS;QACpB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;YAC1C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACrC,CAAC,IAAI,CAAC,CAAC;YACP,GAAG,GAAG,CAAC,CAAC;YACR,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM;QACrB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,IAAI,CAAC,CAAS;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,IAAI,CAAC,CAAS;QACpB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;YACnC,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC;gBACd,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;gBACf,OAAO;YACT,CAAC;YACD,CAAC,IAAI,KAAK,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,MAAM,CAAC,KAAiB;IACtC,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;QAAE,MAAM,WAAW,CAAC,WAAW,EAAE,YAAY,KAAK,CAAC,MAAM,kBAAkB,SAAS,EAAE,CAAC,CAAC;IACpH,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpD,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAClB,OAAO,GAAG,CAAC;AACb,CAAC;AAUD,4EAA4E;AAC5E,0EAA0E;AAC1E,MAAM,mBAAmB,GAAG,IAAI,OAAO,EAAa,CAAC;AACrD,MAAM,UAAU,sBAAsB,CAAC,IAAe,IAAa,OAAO,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAE1G,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,EAAe;IACxC,MAAM,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,kFAAkF;IAClF,4CAA4C;IAC5C,IAAI,OAAO,GAAoC,IAAI,CAAC;IACpD,MAAM,IAAI,GAAgB,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAc;QACtB,IAAI,OAAO;YACT,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,OAAO,CAAC,CAAC;YACX,OAAO,GAAG,CAAC,CAAC;YACZ,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM;gBAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;oBAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,EAAE,IAAI;QACb,IAAI,CAAC,KAAK;YACR,IAAI,MAAM;gBAAE,MAAM,WAAW,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;YAClE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,KAAK;YACH,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACnB,CAAC;KACF,CAAC;IACF,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,EAAE,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,EAAE;QACpB,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBACpB,IAAI,OAAO;oBAAE,OAAO,CAAC,CAAC,CAAC,CAAC;qBACnB,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;oBACrC,MAAM,WAAW,CAAC,WAAW,EAAE,4CAA4C,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,gFAAgF;YAChF,IAAI,CAAC,CAAC,YAAY,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,+BAA+B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC,CAAC;IACF,EAAE,CAAC,OAAO,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,SAAS,IAAI,CAAC,GAAiB;QAC7B,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,QAAQ;IACtB,MAAM,EAAE,GAAG,GAAsD,EAAE,CAAC,CAAC;QACnE,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,KAAK;QACb,IAAI,CAAC,KAAK;YACR,IAAI,IAAI,CAAC,MAAM;gBAAE,MAAM,WAAW,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;YACvE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAK,CAAC;YACxB,cAAc,CAAC,GAAG,EAAE;gBAClB,IAAI,CAAE,IAAuC,CAAC,MAAM;oBAAE,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YAC9E,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK;YACH,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO;YACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAuC,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,cAAc,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;IACf,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;IACf,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;IACX,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAChB,CAAC"}

package/dist/transport/read-fence-policy.d.ts

@@ -0,0 +1,3 @@
+import type { Connector } from "./port.js";
+export declare function registerNextRelayFence<T extends Connector>(connector: T): T;
+export declare function usesNextRelayFence(connector: Connector): boolean;

package/dist/transport/read-fence-policy.js

@@ -0,0 +1,11 @@
+// Internal connector identity, not descriptions or caller-controlled options.
+// This scopes SDK consistency behavior; it is NOT a native read/auth gate.
+const nextRelay = new WeakSet();
+export function registerNextRelayFence(connector) {
+    nextRelay.add(connector);
+    return connector;
+}
+export function usesNextRelayFence(connector) {
+    return nextRelay.has(connector);
+}
+//# sourceMappingURL=read-fence-policy.js.map

package/dist/transport/read-fence-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-fence-policy.js","sourceRoot":"","sources":["../../src/transport/read-fence-policy.ts"],"names":[],"mappings":"AAEA,8EAA8E;AAC9E,2EAA2E;AAC3E,MAAM,SAAS,GAAG,IAAI,OAAO,EAAa,CAAC;AAC3C,MAAM,UAAU,sBAAsB,CAAsB,SAAY;IACtE,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACzB,OAAO,SAAS,CAAC;AACnB,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,SAAoB;IACrD,OAAO,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC"}

package/dist/transport/relay-close.d.ts

@@ -0,0 +1,31 @@
+/** Bounded transport observations only: never admission, authority or raw close text. */
+declare const classes: {
+    readonly 1000: "normal";
+    readonly 1001: "going_away";
+    readonly 1002: "protocol_error";
+    readonly 1003: "unsupported_data";
+    readonly 1005: "no_status";
+    readonly 1006: "abnormal";
+    readonly 1007: "invalid_payload";
+    readonly 1008: "policy_violation";
+    readonly 1009: "message_too_big";
+    readonly 1010: "extension_required";
+    readonly 1011: "internal_error";
+    readonly 1012: "service_restart";
+    readonly 1013: "try_again_later";
+    readonly 1014: "bad_gateway";
+    readonly 1015: "tls_failure";
+    readonly 4000: "pipe_closed";
+    readonly 4401: "unauthenticated";
+    readonly 4403: "grant_inactive";
+    readonly 4404: "connector_offline";
+    readonly 4429: "connector_busy";
+};
+export interface RelayCloseDiagnostic {
+    readonly closeCode: number | null;
+    readonly closeClass: (typeof classes)[keyof typeof classes] | "other" | "unknown";
+}
+export declare function relayCloseDiagnostic(code: unknown): RelayCloseDiagnostic;
+/** Reconstruct only our bounded fields; arbitrary map values never reach snapshots. */
+export declare function relayCloseFromDetails(details: unknown): RelayCloseDiagnostic | undefined;
+export {};